[Mon Nov 10 19:11:18.491708 2025] [:error] [pid 28077:tid 28089] [client 45.153.34.41:47384] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRHIVhIGAozLyErqHeb2NQAAAAU"]
[Tue Nov 11 01:13:25.961402 2025] [:error] [pid 41816:tid 41878] [client 185.30.32.201:45870] [client 185.30.32.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.201, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRIdNUQR8XSNQpgkeuQTVgAAABI"]
[Tue Nov 11 01:13:25.965128 2025] [:error] [pid 41816:tid 41878] [client 185.30.32.201:45870] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 01:13:27.333654 2025] [:error] [pid 41839:tid 41918] [client 185.30.32.201:45878] [client 185.30.32.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.201, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRIdNzGxg5uCD9Nfh5W9vQAAAIQ"]
[Tue Nov 11 01:13:27.346858 2025] [:error] [pid 41839:tid 41918] [client 185.30.32.201:45878] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 04:22:51.764146 2025] [:error] [pid 43436:tid 43481] [client 74.208.58.121:37994] [client 74.208.58.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.58.121, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRJJm9uzjoymDUxEiDgO3gAAAE4"]
[Tue Nov 11 04:22:51.768280 2025] [:error] [pid 43436:tid 43481] [client 74.208.58.121:37994] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 04:22:52.570109 2025] [:error] [pid 43436:tid 43476] [client 74.208.58.121:38008] [client 74.208.58.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.58.121, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRJJnNuzjoymDUxEiDgO4AAAAEk"]
[Tue Nov 11 04:22:52.577592 2025] [:error] [pid 43436:tid 43476] [client 74.208.58.121:38008] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 05:36:19.909593 2025] [:error] [pid 33931:tid 33957] [client 119.45.22.238:46308] [client 119.45.22.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env"] [unique_id "aRJa00nJb679KZEjo-PUnQAAARE"]
[Tue Nov 11 05:36:21.172920 2025] [:error] [pid 34002:tid 34019] [client 119.45.22.238:46322] [client 119.45.22.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/env/.env"] [unique_id "aRJa1dNx46Ag0u620oqhtQAAAA0"]
[Tue Nov 11 05:36:21.637711 2025] [:error] [pid 33931:tid 33949] [client 119.45.22.238:46332] [client 119.45.22.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/api/.env"] [unique_id "aRJa1UnJb679KZEjo-PUoAAAAQk"]
[Tue Nov 11 05:36:22.076813 2025] [:error] [pid 34002:tid 34011] [client 119.45.22.238:46336] [client 119.45.22.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/vendor/.env"] [unique_id "aRJa1tNx46Ag0u620oqhuwAAAAU"]
[Tue Nov 11 05:36:23.523680 2025] [:error] [pid 34002:tid 34025] [client 119.45.22.238:46344] [client 119.45.22.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/api2/.env"] [unique_id "aRJa19Nx46Ag0u620oqhvgAAABM"]
[Tue Nov 11 05:46:15.467507 2025] [:error] [pid 33932:tid 33969] [client 138.197.166.108:56412] [client 138.197.166.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.166.108, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRJdJ5dn2hP2rg5PoHI_JAAAAUI"]
[Tue Nov 11 05:46:15.471977 2025] [:error] [pid 33932:tid 33969] [client 138.197.166.108:56412] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 07:51:15.442858 2025] [:error] [pid 34002:tid 34024] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Nov 11 07:51:15.866696 2025] [:error] [pid 34002:tid 34025] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Tue Nov 11 07:51:16.295556 2025] [:error] [pid 34002:tid 34030] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Tue Nov 11 07:51:16.513624 2025] [:error] [pid 34002:tid 34018] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Tue Nov 11 07:51:16.974556 2025] [:error] [pid 34002:tid 34021] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Tue Nov 11 07:51:17.395895 2025] [:error] [pid 34002:tid 34025] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/article.php
[Tue Nov 11 07:51:17.616303 2025] [:error] [pid 34002:tid 34022] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Nov 11 07:51:17.845966 2025] [:error] [pid 34002:tid 34028] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Nov 11 07:51:18.057458 2025] [:error] [pid 34002:tid 34030] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Tue Nov 11 07:51:18.486133 2025] [:error] [pid 34002:tid 34011] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Tue Nov 11 07:51:18.703795 2025] [:error] [pid 34002:tid 34029] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Tue Nov 11 07:51:18.914808 2025] [:error] [pid 34002:tid 34023] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Tue Nov 11 07:51:19.126502 2025] [:error] [pid 34002:tid 34019] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Tue Nov 11 07:51:19.336406 2025] [:error] [pid 34002:tid 34020] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Tue Nov 11 07:51:19.552855 2025] [:error] [pid 34002:tid 34021] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue Nov 11 07:51:21.730487 2025] [:error] [pid 34002:tid 34020] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Nov 11 07:51:22.957128 2025] [:error] [pid 34002:tid 34024] [client 20.10.179.250:3572] [client 20.10.179.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.10.179.250, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aRJ6etNx46Ag0u620orncwAAABI"]
[Tue Nov 11 07:51:24.739667 2025] [:error] [pid 34002:tid 34013] [client 20.10.179.250:3572] [client 20.10.179.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.10.179.250, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aRJ6fNNx46Ag0u620orngAAAAAc"]
[Tue Nov 11 07:51:25.162776 2025] [:error] [pid 34002:tid 34010] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mariju.php
[Tue Nov 11 07:51:27.188040 2025] [:error] [pid 34002:tid 34030] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Tue Nov 11 07:51:32.304764 2025] [:error] [pid 34002:tid 34028] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Tue Nov 11 07:51:32.515773 2025] [:error] [pid 34002:tid 34030] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Nov 11 07:51:33.578818 2025] [:error] [pid 34002:tid 34011] [client 20.10.179.250:3572] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Nov 11 10:17:53.962214 2025] [:error] [pid 53449:tid 53464] [client 107.189.1.5:24796] [client 107.189.1.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.1.5, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRKc0dpz08j5NoUSzp-9qgAAAUo"], referer: https://duckduckgo.com/
[Tue Nov 11 10:17:53.966008 2025] [:error] [pid 53449:tid 53464] [client 107.189.1.5:24796] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Tue Nov 11 13:14:27.774709 2025] [:error] [pid 53356:tid 53389] [client 198.98.55.213:51717] [client 198.98.55.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.55.213, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRLGM-kdmt0kzjVcUN98iwAAAEQ"], referer: https://www.yahoo.com/
[Tue Nov 11 13:14:27.781325 2025] [:error] [pid 53356:tid 53389] [client 198.98.55.213:51717] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Tue Nov 11 16:38:10.648977 2025] [:error] [pid 43205:tid 43214] [client 209.141.47.135:9251] [client 209.141.47.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.47.135, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRL18r48SbhIkX6TjwNGGQAAAQY"], referer: https://duckduckgo.com/
[Tue Nov 11 16:38:10.653040 2025] [:error] [pid 43205:tid 43214] [client 209.141.47.135:9251] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Tue Nov 11 17:52:22.429918 2025] [:error] [pid 36673:tid 36697] [client 159.203.133.212:46332] [client 159.203.133.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRMHVivASiSDHs9bkffrCgAAAJY"]
[Tue Nov 11 17:52:24.164262 2025] [:error] [pid 36579:tid 36632] [client 159.203.133.212:33818] [client 159.203.133.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRMHWOmuedRSntjwLw5lqAAAABU"]
[Tue Nov 11 19:02:26.583129 2025] [:error] [pid 36673:tid 36680] [client 5.250.187.192:39084] [client 5.250.187.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.187.192, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRMXwivASiSDHs9bkfcB9gAAAIU"]
[Tue Nov 11 19:02:26.587413 2025] [:error] [pid 36673:tid 36680] [client 5.250.187.192:39084] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 19:02:27.668175 2025] [:error] [pid 36579:tid 36632] [client 5.250.187.192:39088] [client 5.250.187.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.187.192, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRMXw-muedRSntjwLw55RwAAABU"]
[Tue Nov 11 19:02:27.675586 2025] [:error] [pid 36579:tid 36632] [client 5.250.187.192:39088] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 20:27:51.211408 2025] [:error] [pid 43205:tid 43215] [client 82.165.87.252:45612] [client 82.165.87.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.87.252, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRMrx748SbhIkX6TjwOaiAAAAQc"]
[Tue Nov 11 20:27:51.216693 2025] [:error] [pid 43205:tid 43215] [client 82.165.87.252:45612] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 20:27:52.273986 2025] [:error] [pid 36580:tid 36638] [client 82.165.87.252:45626] [client 82.165.87.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.87.252, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRMryJaaFQZGE3H9yOHaKgAAAEA"]
[Tue Nov 11 20:27:52.281188 2025] [:error] [pid 36580:tid 36638] [client 82.165.87.252:45626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 20:28:58.322087 2025] [:error] [pid 36578:tid 36591] [client 159.203.133.212:36910] [client 159.203.133.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRMsCkMi03XeylcOo5XcAQAAAMg"]
[Tue Nov 11 20:28:59.784329 2025] [:error] [pid 36580:tid 36655] [client 159.203.133.212:45632] [client 159.203.133.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRMsC5aaFQZGE3H9yOHaagAAAFE"]
[Wed Nov 12 01:56:23.623194 2025] [:error] [pid 40833:tid 40862] [client 27.7.19.76:65228] [client 27.7.19.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.7.19.76, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aRN4x2TefCfEPkRt3xnaDQAAANM"]
[Wed Nov 12 01:56:23.628053 2025] [:error] [pid 40833:tid 40862] [client 27.7.19.76:65228] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 12 07:15:08.910803 2025] [:error] [pid 32959:tid 32971] [client 70.32.77.121:37132] [client 70.32.77.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env"] [unique_id "aRPDfHoyrq7OJfcFnDgAIwAAAQg"]
[Wed Nov 12 07:15:09.232859 2025] [:error] [pid 32959:tid 32987] [client 70.32.77.121:47248] [client 70.32.77.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env"] [unique_id "aRPDfXoyrq7OJfcFnDgAJQAAARg"]
[Wed Nov 12 07:15:09.894037 2025] [:error] [pid 57223:tid 57276] [client 70.32.77.121:37306] [client 70.32.77.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.example"] [unique_id "aRPDfRUU8_2aS__aG8ZnSAAAAFM"]
[Wed Nov 12 07:15:10.219389 2025] [:error] [pid 57224:tid 57306] [client 70.32.77.121:47436] [client 70.32.77.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.example"] [unique_id "aRPDfhs7oZ7imwCSdAkoAwAAAJY"]
[Wed Nov 12 07:15:10.868378 2025] [:error] [pid 32959:tid 32974] [client 70.32.77.121:37512] [client 70.32.77.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/blog/.env"] [unique_id "aRPDfnoyrq7OJfcFnDgAKwAAAQs"]
[Wed Nov 12 07:15:11.191271 2025] [:error] [pid 32959:tid 32970] [client 70.32.77.121:47678] [client 70.32.77.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/blog/.env"] [unique_id "aRPDf3oyrq7OJfcFnDgALAAAAQc"]
[Wed Nov 12 07:15:11.847177 2025] [:error] [pid 57223:tid 57281] [client 70.32.77.121:37748] [client 70.32.77.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/api/.env"] [unique_id "aRPDfxUU8_2aS__aG8ZnSwAAAFg"]
[Wed Nov 12 07:15:12.175492 2025] [:error] [pid 57224:tid 57302] [client 70.32.77.121:47900] [client 70.32.77.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/api/.env"] [unique_id "aRPDgBs7oZ7imwCSdAkoBQAAAJI"]
[Wed Nov 12 07:15:12.822119 2025] [:error] [pid 57312:tid 57318] [client 70.32.77.121:37978] [client 70.32.77.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/laravel/.env"] [unique_id "aRPDgI0cuHgB17JK5qXqoAAAAME"]
[Wed Nov 12 07:15:13.144414 2025] [:error] [pid 57224:tid 57307] [client 70.32.77.121:48118] [client 70.32.77.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/laravel/.env"] [unique_id "aRPDgRs7oZ7imwCSdAkoCAAAAJc"]
[Wed Nov 12 07:15:13.796259 2025] [:error] [pid 57224:tid 57308] [client 70.32.77.121:38160] [client 70.32.77.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/docs/.env"] [unique_id "aRPDgRs7oZ7imwCSdAkoCQAAAJg"]
[Wed Nov 12 07:15:14.118970 2025] [:error] [pid 57223:tid 57262] [client 70.32.77.121:48258] [client 70.32.77.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/docs/.env"] [unique_id "aRPDghUU8_2aS__aG8ZnTgAAAEU"]
[Wed Nov 12 10:36:37.559125 2025] [:error] [pid 60096:tid 60140] [client 209.141.47.135:62939] [client 209.141.47.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.47.135, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRPytTmzkhCvvk8DXOwRmAAAAI0"]
[Wed Nov 12 10:36:37.563626 2025] [:error] [pid 60096:tid 60140] [client 209.141.47.135:62939] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 11:23:36.908118 2025] [:error] [pid 60405:tid 60415] [client 195.178.110.159:38028] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRP9uHMGv_mlVi6mf5pmpgAAAAc"]
[Wed Nov 12 11:33:21.249588 2025] [:error] [pid 60097:tid 60166] [client 107.189.12.178:62457] [client 107.189.12.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.12.178, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRQAAcdT5oio_TbWpi_4qQAAAM0"], referer: https://www.bing.com/
[Wed Nov 12 11:33:21.256248 2025] [:error] [pid 60097:tid 60166] [client 107.189.12.178:62457] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.bing.com/
[Wed Nov 12 11:49:32.549607 2025] [:error] [pid 12744:tid 12763] [client 195.178.110.159:41762] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRQDzJ1cp_ouUvkFj0Wg9wAAAQ8"]
[Wed Nov 12 13:35:38.173497 2025] [:error] [pid 60180:tid 60194] [client 107.189.4.81:13180] [client 107.189.4.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.4.81, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRQcqlhgd7ccS8EZg1rlsQAAAUw"], referer: https://www.yahoo.com/
[Wed Nov 12 13:35:38.180434 2025] [:error] [pid 60180:tid 60194] [client 107.189.4.81:13180] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Wed Nov 12 15:01:52.747963 2025] [:error] [pid 60095:tid 60105] [client 107.189.7.61:29452] [client 107.189.7.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.7.61, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRQw4Hlw2elroagFF1r9FAAAAEY"], referer: https://duckduckgo.com/
[Wed Nov 12 15:01:52.754852 2025] [:error] [pid 60095:tid 60105] [client 107.189.7.61:29452] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Wed Nov 12 15:05:11.293603 2025] [:error] [pid 12744:tid 12769] [client 209.141.60.77:64819] [client 209.141.60.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.60.77, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRQxp51cp_ouUvkFj0UC0AAAARU"]
[Wed Nov 12 15:05:11.298597 2025] [:error] [pid 12744:tid 12769] [client 209.141.60.77:64819] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 15:13:32.773868 2025] [:error] [pid 60096:tid 60128] [client 107.189.7.132:32907] [client 107.189.7.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.7.132, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRQznDmzkhCvvk8DXOxqeAAAAII"], referer: https://www.google.com/
[Wed Nov 12 15:13:32.777624 2025] [:error] [pid 60096:tid 60128] [client 107.189.7.132:32907] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Wed Nov 12 15:16:01.300386 2025] [:error] [pid 60097:tid 60167] [client 107.189.5.134:19119] [client 107.189.5.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.5.134, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRQ0McdT5oio_TbWpi9BcQAAAM4"]
[Wed Nov 12 15:16:01.307499 2025] [:error] [pid 60097:tid 60167] [client 107.189.5.134:19119] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 15:22:35.037333 2025] [:error] [pid 60405:tid 60409] [client 107.189.14.208:26352] [client 107.189.14.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.14.208, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRQ1u3MGv_mlVi6mf5rAfgAAAAE"]
[Wed Nov 12 15:22:35.040912 2025] [:error] [pid 60405:tid 60409] [client 107.189.14.208:26352] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 15:35:38.589225 2025] [:error] [pid 60405:tid 60421] [client 209.141.54.165:12737] [client 209.141.54.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.54.165, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRQ4ynMGv_mlVi6mf5rEHgAAAA0"], referer: https://www.yahoo.com/
[Wed Nov 12 15:35:38.593153 2025] [:error] [pid 60405:tid 60421] [client 209.141.54.165:12737] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Wed Nov 12 16:16:03.290868 2025] [:error] [pid 60405:tid 60423] [client 107.189.7.132:44191] [client 107.189.7.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.7.132, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRRCQ3MGv_mlVi6mf5rRFQAAAA8"], referer: https://www.yahoo.com/
[Wed Nov 12 16:16:03.299206 2025] [:error] [pid 60405:tid 60423] [client 107.189.7.132:44191] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Wed Nov 12 17:31:15.637910 2025] [:error] [pid 60095:tid 60105] [client 209.141.47.135:43311] [client 209.141.47.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.47.135, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRRT43lw2elroagFF1of1wAAAEY"], referer: https://duckduckgo.com/
[Wed Nov 12 17:31:15.644898 2025] [:error] [pid 60095:tid 60105] [client 209.141.47.135:43311] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Wed Nov 12 21:43:08.162336 2025] [:error] [pid 12744:tid 12756] [client 181.222.46.186:54405] [client 181.222.46.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.222.46.186, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aRSO7J1cp_ouUvkFj0WHHQAAAQg"]
[Wed Nov 12 21:43:08.169441 2025] [:error] [pid 12744:tid 12756] [client 181.222.46.186:54405] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 12 21:45:04.457999 2025] [:error] [pid 23737:tid 23757] [client 49.149.72.208:33047] [client 49.149.72.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.149.72.208, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aRSPYBQUsVVfOZWgW_XdWAAAAYg"]
[Wed Nov 12 21:45:04.463349 2025] [:error] [pid 23737:tid 23757] [client 49.149.72.208:33047] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Nov 13 00:05:48.906017 2025] [:error] [pid 12744:tid 12769] [client 4.233.19.146:38462] [client 4.233.19.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.146, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRSwXJ1cp_ouUvkFj0WpcAAAARU"]
[Thu Nov 13 00:05:48.911841 2025] [:error] [pid 12744:tid 12769] [client 4.233.19.146:38462] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 00:05:50.909944 2025] [:error] [pid 60095:tid 60112] [client 4.233.19.146:38409] [client 4.233.19.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.146, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRSwXnlw2elroagFF1prkgAAAE0"]
[Thu Nov 13 00:05:50.916756 2025] [:error] [pid 60095:tid 60112] [client 4.233.19.146:38409] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 07:23:08.156421 2025] [:error] [pid 34451:tid 34455] [client 85.203.36.164:33773] [client 85.203.36.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env"] [unique_id "aRUW3DRcD8KetQb4RaqkoAAAAUI"]
[Thu Nov 13 17:53:08.221969 2025] [:error] [pid 62217:tid 62289] [client 202.65.231.25:11923] [client 202.65.231.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.65.231.25, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aRWqhBjGU3T9wKBmdNc2HAAAAE8"]
[Thu Nov 13 17:53:08.226761 2025] [:error] [pid 62217:tid 62289] [client 202.65.231.25:11923] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Nov 13 17:55:44.544314 2025] [:error] [pid 44354:tid 44371] [client 150.241.107.255:56705] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/"] [unique_id "aRWrIHqKopQhy3G4s3l0eQAAAYw"]
[Thu Nov 13 17:55:45.100822 2025] [:error] [pid 6086:tid 6089] [client 150.241.107.255:56917] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/"] [unique_id "aRWrIX9_6CRZzjZnAe0zdQAAAQA"]
[Thu Nov 13 17:55:45.645943 2025] [:error] [pid 62303:tid 62314] [client 150.241.107.255:57354] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIb-hlFTtVrZw8jDoOQAAAIc"]
[Fri Nov 14 01:44:04.341261 2025] [:error] [pid 56495:tid 56499] [client 85.128.143.144:56026] [client 85.128.143.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.128.143.144, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRYY5FwO8wZZL5WJceXGmwAAAMA"]
[Fri Nov 14 01:44:04.345441 2025] [:error] [pid 56495:tid 56499] [client 85.128.143.144:56026] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 01:44:05.748989 2025] [:error] [pid 49246:tid 49255] [client 85.128.143.144:56032] [client 85.128.143.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.128.143.144, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRYY5d-hdG_ZJBT6alPi-QAAAEU"]
[Fri Nov 14 01:44:05.755714 2025] [:error] [pid 49246:tid 49255] [client 85.128.143.144:56032] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 14:01:19.633081 2025] [:error] [pid 16709:tid 16725] [client 112.133.197.155:51867] [client 112.133.197.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.133.197.155, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aRbFr6NdzfVNC4oipLXnSgAAAU4"]
[Fri Nov 14 14:01:19.638935 2025] [:error] [pid 16709:tid 16725] [client 112.133.197.155:51867] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Nov 14 23:50:41.833520 2025] [:error] [pid 32963:tid 32980] [client 222.253.48.28:37450] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRdP0caC0lo8HQ5cppUcJwAAAY4"]
[Fri Nov 14 23:50:41.837221 2025] [:error] [pid 32963:tid 32980] [client 222.253.48.28:37450] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 23:50:49.740109 2025] [:error] [pid 32999:tid 33022] [client 222.253.48.28:37458] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRdP2aH96QaixO593LB5MAAAAdQ"]
[Fri Nov 14 23:50:49.746397 2025] [:error] [pid 32999:tid 33022] [client 222.253.48.28:37458] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 09:21:45.349757 2025] [:error] [pid 20313:tid 20325] [client 162.240.147.230:34906] [client 162.240.147.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.147.230, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRfVqRI9DXIgPadBLUY09QAAAsk"]
[Sat Nov 15 09:21:45.352427 2025] [:error] [pid 20313:tid 20325] [client 162.240.147.230:34906] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 09:21:46.340619 2025] [:error] [pid 27997:tid 28011] [client 162.240.147.230:34918] [client 162.240.147.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.147.230, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRfVqtpja_6cDxKbxFlqCgAAAMw"]
[Sat Nov 15 09:21:46.348615 2025] [:error] [pid 27997:tid 28011] [client 162.240.147.230:34918] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 09:27:04.496899 2025] [:error] [pid 20346:tid 20372] [client 150.228.189.58:35873] [client 150.228.189.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.228.189.58, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aRfW6J7hsydZdIoVTluhYQAAAxc"]
[Sat Nov 15 09:27:04.502858 2025] [:error] [pid 20346:tid 20372] [client 150.228.189.58:35873] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Nov 15 17:58:36.163297 2025] [:error] [pid 20313:tid 20338] [client 20.2.83.141:52031] [client 20.2.83.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/sites/default/files/"] [unique_id "aRhOzBI9DXIgPadBLUaI7AAAAtY"], referer: binance.com
[Sat Nov 15 17:58:43.155107 2025] [:error] [pid 19961:tid 20010] [client 20.2.83.141:53691] [client 20.2.83.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aRhO0zar7Si-84EApVRxZQAAAdE"], referer: binance.com
[Sat Nov 15 17:58:50.803157 2025] [:error] [pid 20313:tid 20336] [client 20.2.83.141:55502] [client 20.2.83.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/uploads/"] [unique_id "aRhO2hI9DXIgPadBLUaI9AAAAtQ"], referer: binance.com
[Sat Nov 15 17:58:56.973825 2025] [:error] [pid 19961:tid 20012] [client 20.2.83.141:57115] [client 20.2.83.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/images/"] [unique_id "aRhO4Dar7Si-84EApVRxbgAAAdM"], referer: binance.com
[Sat Nov 15 17:59:04.924682 2025] [:error] [pid 22765:tid 22792] [client 20.2.83.141:59234] [client 20.2.83.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/files/"] [unique_id "aRhO6KbrQzjuZmPIWDbmQQAAApY"], referer: binance.com
[Sat Nov 15 19:21:34.685850 2025] [:error] [pid 20654:tid 20678] [client 222.253.48.28:45042] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRhiPncS7eC8vO76_yf6xgAAA5U"]
[Sat Nov 15 19:21:34.689346 2025] [:error] [pid 20654:tid 20678] [client 222.253.48.28:45042] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 19:21:36.148850 2025] [:error] [pid 27911:tid 27992] [client 222.253.48.28:45058] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRhiQMGzUdrhGBIfiKRuvQAAAJg"]
[Sat Nov 15 19:21:36.155881 2025] [:error] [pid 27911:tid 27992] [client 222.253.48.28:45058] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 20:26:25.948600 2025] [:error] [pid 20346:tid 20356] [client 45.134.79.103:63308] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/"] [unique_id "aRhxcZ7hsydZdIoVTltMvQAAAwc"]
[Sat Nov 15 20:26:26.600263 2025] [:error] [pid 22765:tid 22786] [client 45.134.79.103:63511] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/"] [unique_id "aRhxcqbrQzjuZmPIWDb-egAAApA"]
[Sat Nov 15 20:26:27.230614 2025] [:error] [pid 22765:tid 22790] [client 45.134.79.103:63769] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxc6brQzjuZmPIWDb-hAAAApQ"]
[Sun Nov 16 00:16:36.297889 2025] [:error] [pid 22765:tid 22793] [client 14.225.211.166:42938] [client 14.225.211.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.211.166, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRinZKbrQzjuZmPIWDYtEgAAApc"]
[Sun Nov 16 00:16:36.302015 2025] [:error] [pid 22765:tid 22793] [client 14.225.211.166:42938] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 16 00:16:37.034708 2025] [:error] [pid 20654:tid 20669] [client 14.225.211.166:42952] [client 14.225.211.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.211.166, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRinZXcS7eC8vO76_ycvcQAAA4w"]
[Sun Nov 16 00:16:37.042357 2025] [:error] [pid 20654:tid 20669] [client 14.225.211.166:42952] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 16 05:40:24.453371 2025] [:error] [pid 20556:tid 20571] [client 116.72.90.233:58965] [client 116.72.90.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.72.90.233, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aRjzSEkbyEckbWtBcCKSdwAAAQ0"]
[Sun Nov 16 05:40:24.459324 2025] [:error] [pid 20556:tid 20571] [client 116.72.90.233:58965] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Nov 16 11:53:30.839347 2025] [:error] [pid 52563:tid 52574] [client 51.15.16.76:60130] [client 51.15.16.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.15.16.76, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRlKus-l3ey-hVJ5AutbTgAAAMg"]
[Sun Nov 16 11:53:30.842885 2025] [:error] [pid 52563:tid 52574] [client 51.15.16.76:60130] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 16 11:53:31.875507 2025] [:error] [pid 52470:tid 52524] [client 51.15.16.76:42274] [client 51.15.16.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.15.16.76, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRlKu0g9mXF2ZFFtj1UkmQAAAFM"]
[Sun Nov 16 11:53:31.881967 2025] [:error] [pid 52470:tid 52524] [client 51.15.16.76:42274] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 16 17:45:04.482175 2025] [:error] [pid 20556:tid 20576] [client 68.183.48.230:43966] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRmdIEkbyEckbWtBcCJ75QAAARI"]
[Sun Nov 16 17:45:07.396882 2025] [:error] [pid 20556:tid 20581] [client 68.183.48.230:59430] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRmdI0kbyEckbWtBcCJ76gAAARc"]
[Sun Nov 16 17:53:22.799037 2025] [:error] [pid 34227:tid 34245] [client 157.66.56.131:60995] [client 157.66.56.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/sftp-config.json"] [unique_id "aRmfEn108zGLYs9eMugxgQAAAhA"]
[Sun Nov 16 17:55:28.927205 2025] [:error] [pid 52469:tid 52485] [client 155.94.163.116:61622] [client 155.94.163.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/images/"] [unique_id "aRmfkE6HaXpHeEZ98Z3PDAAAAAg"], referer: binance.com
[Sun Nov 16 17:55:37.153140 2025] [:error] [pid 34227:tid 34234] [client 155.94.163.116:58654] [client 155.94.163.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/files/"] [unique_id "aRmfmX108zGLYs9eMugx8wAAAgU"], referer: binance.com
[Sun Nov 16 19:01:11.437428 2025] [:error] [pid 34227:tid 34230] [client 68.183.48.230:39676] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRmu93108zGLYs9eMug8PgAAAgE"]
[Sun Nov 16 19:01:14.608068 2025] [:error] [pid 34164:tid 34171] [client 68.183.48.230:43820] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRmu-u93ccBCLD8-Q4ZXKwAAAYM"]
[Sun Nov 16 20:57:16.506005 2025] [:error] [pid 52471:tid 52556] [client 157.66.56.131:64015] [client 157.66.56.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.66.56.131, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aRnKLNmWsFzjR5CEgDV3MQAAAJg"]
[Sun Nov 16 20:57:16.511190 2025] [:error] [pid 52471:tid 52556] [client 157.66.56.131:64015] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Nov 16 20:57:17.753602 2025] [:error] [pid 52471:tid 52538] [client 157.66.56.131:64015] [client 157.66.56.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aRnKLdmWsFzjR5CEgDV3PgAAAIY"]
[Sun Nov 16 20:57:17.971191 2025] [:error] [pid 34165:tid 34208] [client 157.66.56.131:64558] [client 157.66.56.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aRnKLXhG2YTKEjXchwlCuAAAAc0"]
[Sun Nov 16 20:57:18.188758 2025] [:error] [pid 34165:tid 34213] [client 157.66.56.131:64634] [client 157.66.56.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aRnKLnhG2YTKEjXchwlCuQAAAdI"]
[Sun Nov 16 20:57:18.405588 2025] [:error] [pid 34133:tid 34158] [client 157.66.56.131:64706] [client 157.66.56.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aRnKLvSAB3iwXVRY0gGqwgAAAVc"]
[Sun Nov 16 20:57:18.623089 2025] [:error] [pid 52563:tid 52588] [client 157.66.56.131:64779] [client 157.66.56.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aRnKLs-l3ey-hVJ5AuvJNgAAANY"]
[Sun Nov 16 20:57:18.843584 2025] [:error] [pid 34165:tid 34207] [client 157.66.56.131:64833] [client 157.66.56.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aRnKLnhG2YTKEjXchwlCugAAAcw"]
[Sun Nov 16 20:57:19.063811 2025] [:error] [pid 52469:tid 52478] [client 157.66.56.131:64904] [client 157.66.56.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aRnKL06HaXpHeEZ98Z0LSQAAAAE"]
[Sun Nov 16 22:44:53.611968 2025] [:error] [pid 34271:tid 34284] [client 68.183.48.230:58066] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRnjZUNmlZhoZZV1BUDrFAAAAks"]
[Sun Nov 16 22:44:55.527487 2025] [:error] [pid 52471:tid 52536] [client 68.183.48.230:50850] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRnjZ9mWsFzjR5CEgDWNjQAAAIQ"]
[Mon Nov 17 01:32:46.017956 2025] [:error] [pid 55657:tid 55724] [client 68.183.48.230:50438] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRoKvh2pywrNN427_XRGEgAAAcs"]
[Mon Nov 17 01:32:49.457387 2025] [:error] [pid 55745:tid 55763] [client 68.183.48.230:48218] [client 68.183.48.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRoKwYZk0eT801XQsat_aAAAAFA"]
[Mon Nov 17 03:29:20.555620 2025] [:error] [pid 55657:tid 55712] [client 179.118.229.109:49999] [client 179.118.229.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.118.229.109, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aRomEB2pywrNN427_XRqAwAAAcQ"]
[Mon Nov 17 03:29:20.559745 2025] [:error] [pid 55657:tid 55712] [client 179.118.229.109:49999] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Nov 17 09:13:29.554153 2025] [:error] [pid 39449:tid 39459] [client 139.180.163.90:34696] [client 139.180.163.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.180.163.90, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRp2uaUCymTA3MDfzLPRRQAAAAU"]
[Mon Nov 17 09:13:29.559004 2025] [:error] [pid 39449:tid 39459] [client 139.180.163.90:34696] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 17 09:13:29.715518 2025] [:error] [pid 15150:tid 15161] [client 139.180.163.90:34710] [client 139.180.163.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.180.163.90, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRp2uX2DEo_rcsFuxj0UfAAAAYk"]
[Mon Nov 17 09:13:29.721814 2025] [:error] [pid 15150:tid 15161] [client 139.180.163.90:34710] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 17 20:54:30.654561 2025] [:error] [pid 32753:tid 32762] [client 4.233.19.146:1991] [client 4.233.19.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.146, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRsbBk6YNqI5vkht922RTAAAA8Y"]
[Mon Nov 17 20:54:30.658441 2025] [:error] [pid 32753:tid 32762] [client 4.233.19.146:1991] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 17 20:54:31.957215 2025] [:error] [pid 30801:tid 30822] [client 4.233.19.146:2004] [client 4.233.19.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.146, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRsbBzbGAU49DhMTBD73MAAAAlM"]
[Mon Nov 17 20:54:31.963807 2025] [:error] [pid 30801:tid 30822] [client 4.233.19.146:2004] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 17 23:50:02.879093 2025] [:error] [pid 15888:tid 15915] [client 179.233.182.38:49390] [client 179.233.182.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.233.182.38, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aRtEKgjAdDTBm4W3qW1SMAAAAdg"]
[Mon Nov 17 23:50:02.886190 2025] [:error] [pid 15888:tid 15915] [client 179.233.182.38:49390] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 18 14:20:54.804599 2025] [:error] [pid 44471:tid 44504] [client 87.106.179.74:34658] [client 87.106.179.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.106.179.74, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRwQRu_6m0bQO14XwtMK2QAAAQA"]
[Tue Nov 18 14:20:54.808625 2025] [:error] [pid 44471:tid 44504] [client 87.106.179.74:34658] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 14:20:55.860825 2025] [:error] [pid 1387:tid 1401] [client 87.106.179.74:40650] [client 87.106.179.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.106.179.74, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRwQR0zBvalKyx3hMvUAEQAAAAg"]
[Tue Nov 18 14:20:55.867731 2025] [:error] [pid 1387:tid 1401] [client 87.106.179.74:40650] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 14:38:32.470697 2025] [:error] [pid 44470:tid 44485] [client 112.175.184.99:49548] [client 112.175.184.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 112.175.184.99, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRwUaDv-RLYfULjlgDZ_1AAAAEo"]
[Tue Nov 18 14:38:32.477116 2025] [:error] [pid 44470:tid 44485] [client 112.175.184.99:49548] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 14:38:33.350406 2025] [:error] [pid 44470:tid 44496] [client 112.175.184.99:49554] [client 112.175.184.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 112.175.184.99, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRwUaTv-RLYfULjlgDZ_1wAAAFU"]
[Tue Nov 18 14:38:33.358330 2025] [:error] [pid 44470:tid 44496] [client 112.175.184.99:49554] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 14:39:25.208988 2025] [:error] [pid 44472:tid 44555] [client 80.77.123.93:36118] [client 80.77.123.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.77.123.93, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRwUnYKhGwkiLjv8BQykVwAAAVg"]
[Tue Nov 18 14:39:25.212465 2025] [:error] [pid 44472:tid 44555] [client 80.77.123.93:36118] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 14:39:26.269620 2025] [:error] [pid 44560:tid 44572] [client 80.77.123.93:36126] [client 80.77.123.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.77.123.93, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRwUngnbP7etF3q5-5tFkAAAAME"]
[Tue Nov 18 14:39:26.276485 2025] [:error] [pid 44560:tid 44572] [client 80.77.123.93:36126] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 16:57:45.496831 2025] [:error] [pid 44472:tid 44532] [client 74.208.59.165:41906] [client 74.208.59.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.59.165, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRw1CYKhGwkiLjv8BQzROAAAAUE"]
[Tue Nov 18 16:57:45.501239 2025] [:error] [pid 44472:tid 44532] [client 74.208.59.165:41906] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 16:57:46.301225 2025] [:error] [pid 1387:tid 1417] [client 74.208.59.165:41922] [client 74.208.59.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.59.165, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aRw1CkzBvalKyx3hMvVEzgAAABg"]
[Tue Nov 18 16:57:46.307242 2025] [:error] [pid 1387:tid 1417] [client 74.208.59.165:41922] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 20:06:50.677286 2025] [:error] [pid 44471:tid 44524] [client 143.44.168.253:39817] [client 143.44.168.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.44.168.253, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aRxhWu_6m0bQO14XwtNsBAAAARQ"]
[Tue Nov 18 20:06:50.681845 2025] [:error] [pid 44471:tid 44524] [client 143.44.168.253:39817] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 18 21:37:28.505969 2025] [:error] [pid 44560:tid 44595] [client 45.134.79.103:60277] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2mAnbP7etF3q5-5vIwwAAANg"]
[Wed Nov 19 04:11:21.990285 2025] [:error] [pid 26938:tid 26962] [client 34.150.228.0:62769] [client 34.150.228.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.150.228.0, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aRzS6cDqph74qewwpgvh6wAAANQ"]
[Wed Nov 19 04:11:21.994197 2025] [:error] [pid 26938:tid 26962] [client 34.150.228.0:62769] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 19 04:11:24.665003 2025] [:error] [pid 26938:tid 26963] [client 34.150.228.0:62769] [client 34.150.228.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aRzS7MDqph74qewwpgvh-QAAANU"]
[Wed Nov 19 04:11:25.087303 2025] [:error] [pid 26984:tid 27021] [client 34.150.228.0:55430] [client 34.150.228.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aRzS7U8VZ0IUoDRAcjCa3gAAAUE"]
[Wed Nov 19 04:11:25.543965 2025] [:error] [pid 26822:tid 26841] [client 34.150.228.0:60888] [client 34.150.228.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aRzS7XgCN9WgfdTDKjj-hgAAAAU"]
[Wed Nov 19 04:11:26.014290 2025] [:error] [pid 26823:tid 26866] [client 34.150.228.0:57119] [client 34.150.228.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aRzS7hrdHF23yRSxyCOmMQAAAEE"]
[Wed Nov 19 04:11:26.485373 2025] [:error] [pid 26824:tid 26897] [client 34.150.228.0:53802] [client 34.150.228.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aRzS7jBend3ToMUtm2qOPAAAAIU"]
[Wed Nov 19 04:11:26.952992 2025] [:error] [pid 26938:tid 26966] [client 34.150.228.0:56388] [client 34.150.228.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aRzS7sDqph74qewwpgvh_QAAANg"]
[Wed Nov 19 04:11:27.416638 2025] [:error] [pid 26938:tid 26949] [client 34.150.228.0:57501] [client 34.150.228.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aRzS78Dqph74qewwpgvh_gAAAMc"]
[Wed Nov 19 06:51:57.053109 2025] [:error] [pid 6555:tid 6599] [client 34.143.147.242:46896] [client 34.143.147.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aRz4jUbVJm8eMsGMTCN_qgAAAEg"]
[Wed Nov 19 16:15:45.989401 2025] [:error] [pid 6556:tid 6624] [client 103.94.11.164:39720] [client 103.94.11.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.94.11.164, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aR18sZuL7hhgrmdM1mv-wwAAAIY"]
[Wed Nov 19 16:15:45.994067 2025] [:error] [pid 6556:tid 6624] [client 103.94.11.164:39720] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 19 18:36:28.558342 2025] [:error] [pid 12672:tid 12697] [client 5.250.187.192:35406] [client 5.250.187.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.187.192, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aR2drP9vojl6X1cc5mUSEgAAAdQ"]
[Wed Nov 19 18:36:28.562460 2025] [:error] [pid 12672:tid 12697] [client 5.250.187.192:35406] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 19 18:36:29.673497 2025] [:error] [pid 6555:tid 6597] [client 5.250.187.192:35414] [client 5.250.187.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.250.187.192, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aR2drUbVJm8eMsGMTCMhOAAAAEY"]
[Wed Nov 19 18:36:29.680617 2025] [:error] [pid 6555:tid 6597] [client 5.250.187.192:35414] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 19 20:35:57.144194 2025] [:error] [pid 6556:tid 6624] [client 104.196.176.201:57879] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rZuL7hhgrmdM1msnZwAAAIY"]
[Wed Nov 19 22:37:52.847788 2025] [:error] [pid 12672:tid 12683] [client 34.66.205.145:63874] [client 34.66.205.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.66.205.145, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3WQP9vojl6X1cc5mVE6QAAAcY"]
[Wed Nov 19 22:37:52.852034 2025] [:error] [pid 12672:tid 12683] [client 34.66.205.145:63874] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 19 22:37:54.884286 2025] [:error] [pid 12672:tid 12680] [client 34.66.205.145:63874] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aR3WQv9vojl6X1cc5mVE-QAAAcM"]
[Wed Nov 19 22:37:55.402869 2025] [:error] [pid 12643:tid 12670] [client 34.66.205.145:53423] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aR3WQ8aLCNSdLHNAGt4IxQAAAZg"]
[Wed Nov 19 22:37:56.041182 2025] [:error] [pid 6919:tid 6935] [client 34.66.205.145:54031] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aR3WREYFdN1s_9xJVUmVCwAAAQ0"]
[Wed Nov 19 22:37:56.670599 2025] [:error] [pid 6555:tid 6600] [client 34.66.205.145:58118] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aR3WREbVJm8eMsGMTCNEsgAAAEk"]
[Wed Nov 19 22:37:57.121827 2025] [:error] [pid 26664:tid 26675] [client 34.66.205.145:54189] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aR3WRYpWc1yoj2P7MeAU7QAAAUg"]
[Wed Nov 19 22:37:57.752157 2025] [:error] [pid 6555:tid 6596] [client 34.66.205.145:57071] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aR3WRUbVJm8eMsGMTCNEtAAAAEU"]
[Wed Nov 19 22:37:58.299689 2025] [:error] [pid 12672:tid 12691] [client 34.66.205.145:53739] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aR3WRv9vojl6X1cc5mVE-wAAAc4"]
[Wed Nov 19 22:37:58.874396 2025] [:error] [pid 6644:tid 6664] [client 34.66.205.145:50508] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aR3WRk0i6Rf788MB6sbyygAAANI"]
[Wed Nov 19 22:37:59.349939 2025] [:error] [pid 6556:tid 6641] [client 34.66.205.145:64505] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aR3WR5uL7hhgrmdM1ms3sAAAAJc"]
[Wed Nov 19 22:37:59.876102 2025] [:error] [pid 6556:tid 6637] [client 34.66.205.145:59931] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aR3WR5uL7hhgrmdM1ms3sQAAAJM"]
[Wed Nov 19 22:38:00.474199 2025] [:error] [pid 6556:tid 6631] [client 34.66.205.145:50522] [client 34.66.205.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aR3WSJuL7hhgrmdM1ms3sgAAAI0"]
[Thu Nov 20 00:32:33.590359 2025] [:error] [pid 50475:tid 50544] [client 34.139.83.88:60080] [client 34.139.83.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aR3xIVzRy2BTBjqrUmkTNwAAARY"]
[Thu Nov 20 12:01:46.345030 2025] [:error] [pid 55340:tid 55347] [client 103.160.232.50:63698] [client 103.160.232.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.160.232.50, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aR6SqvOxD-NeMydTybBFdwAAAAI"]
[Thu Nov 20 12:01:46.348847 2025] [:error] [pid 55340:tid 55347] [client 103.160.232.50:63698] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Nov 20 12:10:19.988300 2025] [:error] [pid 55343:tid 55416] [client 98.81.111.26:64280] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wordpress"] [unique_id "aR6Uq1WlO3EnyVMV7w5k1QAAAJE"]
[Thu Nov 20 12:10:20.396617 2025] [:error] [pid 34444:tid 34468] [client 98.81.111.26:53304] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wordpress"] [unique_id "aR6UrFNEol4jlmmA_GPwtgAAAVY"]
[Thu Nov 20 12:10:20.802296 2025] [:error] [pid 55430:tid 55457] [client 98.81.111.26:64655] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wordpress"] [unique_id "aR6UrPPZXaIMEU4pE7ugYAAAANg"]
[Thu Nov 20 12:10:21.208642 2025] [:error] [pid 55430:tid 55443] [client 98.81.111.26:61189] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wordpress"] [unique_id "aR6UrfPZXaIMEU4pE7ugeAAAAMo"]
[Thu Nov 20 12:10:21.612219 2025] [:error] [pid 34405:tid 34412] [client 98.81.111.26:63102] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wordpress"] [unique_id "aR6UrTFpvu8oRK7ATfvJDQAAAQU"]
[Thu Nov 20 12:10:22.025040 2025] [:error] [pid 55430:tid 55436] [client 98.81.111.26:65299] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrvPZXaIMEU4pE7ugqAAAAMM"]
[Thu Nov 20 12:10:22.434373 2025] [:error] [pid 55340:tid 55366] [client 98.81.111.26:59694] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrvOxD-NeMydTybBJ6QAAABU"]
[Thu Nov 20 12:10:22.842476 2025] [:error] [pid 34444:tid 34447] [client 98.81.111.26:63555] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrlNEol4jlmmA_GPw9wAAAUE"]
[Thu Nov 20 12:10:23.247429 2025] [:error] [pid 804:tid 836] [client 98.81.111.26:60951] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6Ur_aRHpUlPL9O0Lk14gAAAYw"]
[Thu Nov 20 12:10:23.674385 2025] [:error] [pid 55430:tid 55439] [client 98.81.111.26:55056] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6Ur_PZXaIMEU4pE7uhDQAAAMY"]
[Thu Nov 20 12:10:24.101488 2025] [:error] [pid 55343:tid 55404] [client 98.81.111.26:60382] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsFWlO3EnyVMV7w5lYwAAAIU"]
[Thu Nov 20 12:10:24.507515 2025] [:error] [pid 55430:tid 55441] [client 98.81.111.26:57761] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsPPZXaIMEU4pE7uhVwAAAMg"]
[Thu Nov 20 12:10:24.919376 2025] [:error] [pid 34444:tid 34447] [client 98.81.111.26:63686] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsFNEol4jlmmA_GPxLwAAAUE"]
[Thu Nov 20 12:10:25.328723 2025] [:error] [pid 34444:tid 34466] [client 98.81.111.26:57315] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsVNEol4jlmmA_GPxNAAAAVQ"]
[Thu Nov 20 12:10:25.751543 2025] [:error] [pid 55340:tid 55350] [client 98.81.111.26:49555] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UsfOxD-NeMydTybBKMQAAAAU"]
[Thu Nov 20 12:10:26.167642 2025] [:error] [pid 34444:tid 34447] [client 98.81.111.26:49943] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp"] [unique_id "aR6UslNEol4jlmmA_GPxPQAAAUE"]
[Thu Nov 20 12:10:26.576397 2025] [:error] [pid 55343:tid 55404] [client 98.81.111.26:51749] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp"] [unique_id "aR6UslWlO3EnyVMV7w5legAAAIU"]
[Thu Nov 20 12:10:26.985095 2025] [:error] [pid 34405:tid 34420] [client 98.81.111.26:63488] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp"] [unique_id "aR6UsjFpvu8oRK7ATfvJnwAAAQ0"]
[Thu Nov 20 12:10:27.391214 2025] [:error] [pid 55340:tid 55347] [client 98.81.111.26:64388] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp"] [unique_id "aR6Us_OxD-NeMydTybBKRQAAAAI"]
[Thu Nov 20 12:10:27.802204 2025] [:error] [pid 55342:tid 55383] [client 98.81.111.26:64830] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp"] [unique_id "aR6Us7g6x32Tvk7fIG-MVwAAAEs"]
[Thu Nov 20 12:10:28.208156 2025] [:error] [pid 34444:tid 34459] [client 98.81.111.26:59786] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/blog"] [unique_id "aR6UtFNEol4jlmmA_GPxTAAAAU0"]
[Thu Nov 20 12:10:28.615171 2025] [:error] [pid 55342:tid 55386] [client 98.81.111.26:55413] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/blog"] [unique_id "aR6UtLg6x32Tvk7fIG-MaAAAAE4"]
[Thu Nov 20 12:10:29.023317 2025] [:error] [pid 34405:tid 34428] [client 98.81.111.26:60504] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/blog"] [unique_id "aR6UtTFpvu8oRK7ATfvJqwAAARU"]
[Thu Nov 20 12:10:29.430315 2025] [:error] [pid 55343:tid 55418] [client 98.81.111.26:57002] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/blog"] [unique_id "aR6UtVWlO3EnyVMV7w5lkAAAAJM"]
[Thu Nov 20 12:10:29.836824 2025] [:error] [pid 34405:tid 34407] [client 98.81.111.26:55421] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/blog"] [unique_id "aR6UtTFpvu8oRK7ATfvJuwAAAQA"]
[Thu Nov 20 12:10:30.244188 2025] [:error] [pid 34405:tid 34418] [client 98.81.111.26:65057] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/new"] [unique_id "aR6UtjFpvu8oRK7ATfvJwAAAAQs"]
[Thu Nov 20 12:10:30.649862 2025] [:error] [pid 34444:tid 34451] [client 98.81.111.26:53422] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/new"] [unique_id "aR6UtlNEol4jlmmA_GPxXAAAAUU"]
[Thu Nov 20 12:10:31.055027 2025] [:error] [pid 804:tid 842] [client 98.81.111.26:61572] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/new"] [unique_id "aR6Ut_aRHpUlPL9O0Lk2TwAAAZI"]
[Thu Nov 20 12:10:31.483223 2025] [:error] [pid 55343:tid 55419] [client 98.81.111.26:62002] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/new"] [unique_id "aR6Ut1WlO3EnyVMV7w5lnAAAAJQ"]
[Thu Nov 20 12:10:31.887621 2025] [:error] [pid 55342:tid 55391] [client 98.81.111.26:51331] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/new"] [unique_id "aR6Ut7g6x32Tvk7fIG-MigAAAFM"]
[Thu Nov 20 12:10:32.292520 2025] [:error] [pid 55430:tid 55433] [client 98.81.111.26:59130] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/old"] [unique_id "aR6UuPPZXaIMEU4pE7uhpwAAAMA"]
[Thu Nov 20 12:10:32.697177 2025] [:error] [pid 55343:tid 55410] [client 98.81.111.26:50978] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/old"] [unique_id "aR6UuFWlO3EnyVMV7w5loQAAAIs"]
[Thu Nov 20 12:10:33.099606 2025] [:error] [pid 55340:tid 55363] [client 98.81.111.26:59844] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/old"] [unique_id "aR6UufOxD-NeMydTybBKdgAAABI"]
[Thu Nov 20 12:10:33.503200 2025] [:error] [pid 34444:tid 34469] [client 98.81.111.26:63211] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/old"] [unique_id "aR6UuVNEol4jlmmA_GPxeAAAAVc"]
[Thu Nov 20 12:10:33.912187 2025] [:error] [pid 55343:tid 55403] [client 98.81.111.26:58523] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/old"] [unique_id "aR6UuVWlO3EnyVMV7w5lsQAAAIQ"]
[Thu Nov 20 12:10:34.316972 2025] [:error] [pid 55342:tid 55388] [client 98.81.111.26:53689] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/newsite"] [unique_id "aR6Uurg6x32Tvk7fIG-MnQAAAFA"]
[Thu Nov 20 12:10:34.728385 2025] [:error] [pid 34405:tid 34427] [client 98.81.111.26:56860] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/newsite"] [unique_id "aR6UujFpvu8oRK7ATfvJ8AAAARQ"]
[Thu Nov 20 12:10:35.132696 2025] [:error] [pid 55340:tid 55367] [client 98.81.111.26:60110] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/newsite"] [unique_id "aR6Uu_OxD-NeMydTybBKjQAAABY"]
[Thu Nov 20 12:10:35.540258 2025] [:error] [pid 34405:tid 34430] [client 98.81.111.26:56097] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/newsite"] [unique_id "aR6UuzFpvu8oRK7ATfvJ-AAAARc"]
[Thu Nov 20 12:10:35.946642 2025] [:error] [pid 34444:tid 34458] [client 98.81.111.26:60376] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/newsite"] [unique_id "aR6Uu1NEol4jlmmA_GPxlgAAAUw"]
[Thu Nov 20 12:10:36.349339 2025] [:error] [pid 55340:tid 55348] [client 98.81.111.26:64680] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test"] [unique_id "aR6UvPOxD-NeMydTybBKmwAAAAM"]
[Thu Nov 20 12:10:36.755842 2025] [:error] [pid 55340:tid 55364] [client 98.81.111.26:55607] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test"] [unique_id "aR6UvPOxD-NeMydTybBKnQAAABM"]
[Thu Nov 20 12:10:37.160005 2025] [:error] [pid 34405:tid 34408] [client 98.81.111.26:56602] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test"] [unique_id "aR6UvTFpvu8oRK7ATfvKAwAAAQE"]
[Thu Nov 20 12:10:37.566249 2025] [:error] [pid 55342:tid 55374] [client 98.81.111.26:64573] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test"] [unique_id "aR6Uvbg6x32Tvk7fIG-MzAAAAEI"]
[Thu Nov 20 12:10:37.974709 2025] [:error] [pid 55342:tid 55386] [client 98.81.111.26:61832] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test"] [unique_id "aR6Uvbg6x32Tvk7fIG-MzwAAAE4"]
[Thu Nov 20 12:10:38.380324 2025] [:error] [pid 55430:tid 55441] [client 98.81.111.26:64133] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/main"] [unique_id "aR6UvvPZXaIMEU4pE7uh3wAAAMg"]
[Thu Nov 20 12:10:38.791317 2025] [:error] [pid 804:tid 837] [client 98.81.111.26:63281] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/main"] [unique_id "aR6UvvaRHpUlPL9O0Lk2mwAAAY0"]
[Thu Nov 20 12:10:39.199378 2025] [:error] [pid 34405:tid 34415] [client 98.81.111.26:58304] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/main"] [unique_id "aR6UvzFpvu8oRK7ATfvKGwAAAQg"]
[Thu Nov 20 12:10:39.605642 2025] [:error] [pid 55342:tid 55386] [client 98.81.111.26:52740] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/main"] [unique_id "aR6Uv7g6x32Tvk7fIG-M4gAAAE4"]
[Thu Nov 20 12:10:40.010218 2025] [:error] [pid 34405:tid 34416] [client 98.81.111.26:63284] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/main"] [unique_id "aR6UwDFpvu8oRK7ATfvKKQAAAQk"]
[Thu Nov 20 12:10:40.418234 2025] [:error] [pid 55430:tid 55447] [client 98.81.111.26:55739] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/testing"] [unique_id "aR6UwPPZXaIMEU4pE7uh4wAAAM4"]
[Thu Nov 20 12:10:40.826039 2025] [:error] [pid 804:tid 817] [client 98.81.111.26:51490] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/testing"] [unique_id "aR6UwPaRHpUlPL9O0Lk2tQAAAYM"]
[Thu Nov 20 12:10:41.229114 2025] [:error] [pid 55340:tid 55351] [client 98.81.111.26:61972] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/testing"] [unique_id "aR6UwfOxD-NeMydTybBKzQAAAAY"]
[Thu Nov 20 12:10:41.641106 2025] [:error] [pid 34444:tid 34450] [client 98.81.111.26:51976] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/testing"] [unique_id "aR6UwVNEol4jlmmA_GPx4QAAAUQ"]
[Thu Nov 20 12:10:42.059254 2025] [:error] [pid 804:tid 822] [client 98.81.111.26:51490] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/testing"] [unique_id "aR6UwvaRHpUlPL9O0Lk2zAAAAYY"]
[Thu Nov 20 12:10:42.465225 2025] [:error] [pid 55343:tid 55423] [client 98.81.111.26:61687] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/site"] [unique_id "aR6UwlWlO3EnyVMV7w5l6gAAAJg"]
[Thu Nov 20 12:10:42.869714 2025] [:error] [pid 34405:tid 34425] [client 98.81.111.26:51842] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/site"] [unique_id "aR6UwjFpvu8oRK7ATfvKPQAAARI"]
[Thu Nov 20 12:10:43.272718 2025] [:error] [pid 55340:tid 55351] [client 98.81.111.26:54375] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/site"] [unique_id "aR6Uw_OxD-NeMydTybBK4AAAAAY"]
[Thu Nov 20 12:10:43.676347 2025] [:error] [pid 34444:tid 34446] [client 98.81.111.26:60064] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/site"] [unique_id "aR6Uw1NEol4jlmmA_GPx_gAAAUA"]
[Thu Nov 20 12:10:44.083778 2025] [:error] [pid 34405:tid 34426] [client 98.81.111.26:54142] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/site"] [unique_id "aR6UxDFpvu8oRK7ATfvKSwAAARM"]
[Thu Nov 20 12:10:44.487255 2025] [:error] [pid 804:tid 846] [client 98.81.111.26:54308] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/backup"] [unique_id "aR6UxPaRHpUlPL9O0Lk26wAAAZY"]
[Thu Nov 20 12:10:44.891228 2025] [:error] [pid 55343:tid 55421] [client 98.81.111.26:61601] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/backup"] [unique_id "aR6UxFWlO3EnyVMV7w5mBwAAAJY"]
[Thu Nov 20 12:10:45.295123 2025] [:error] [pid 34444:tid 34468] [client 98.81.111.26:62208] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/backup"] [unique_id "aR6UxVNEol4jlmmA_GPyCgAAAVY"]
[Thu Nov 20 12:10:45.700268 2025] [:error] [pid 34444:tid 34446] [client 98.81.111.26:55855] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/backup"] [unique_id "aR6UxVNEol4jlmmA_GPyDQAAAUA"]
[Thu Nov 20 12:10:46.106888 2025] [:error] [pid 55430:tid 55456] [client 98.81.111.26:64221] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/backup"] [unique_id "aR6UxvPZXaIMEU4pE7uiDwAAANc"]
[Thu Nov 20 12:10:46.513511 2025] [:error] [pid 34444:tid 34455] [client 98.81.111.26:56017] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/demo"] [unique_id "aR6UxlNEol4jlmmA_GPyGQAAAUk"]
[Thu Nov 20 12:10:46.920017 2025] [:error] [pid 34444:tid 34456] [client 98.81.111.26:59248] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/demo"] [unique_id "aR6UxlNEol4jlmmA_GPyIQAAAUo"]
[Thu Nov 20 12:10:47.327044 2025] [:error] [pid 34405:tid 34411] [client 98.81.111.26:55764] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/demo"] [unique_id "aR6UxzFpvu8oRK7ATfvKXwAAAQQ"]
[Thu Nov 20 12:10:47.728963 2025] [:error] [pid 55430:tid 55454] [client 98.81.111.26:63408] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/demo"] [unique_id "aR6Ux_PZXaIMEU4pE7uiMAAAANU"]
[Thu Nov 20 12:10:48.135610 2025] [:error] [pid 34444:tid 34455] [client 98.81.111.26:53024] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/demo"] [unique_id "aR6UyFNEol4jlmmA_GPyQAAAAUk"]
[Thu Nov 20 12:10:48.538119 2025] [:error] [pid 55343:tid 55407] [client 98.81.111.26:62678] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/home"] [unique_id "aR6UyFWlO3EnyVMV7w5mHQAAAIg"]
[Thu Nov 20 12:10:48.944192 2025] [:error] [pid 804:tid 820] [client 98.81.111.26:59644] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/home"] [unique_id "aR6UyPaRHpUlPL9O0Lk3FQAAAYQ"]
[Thu Nov 20 12:10:49.347761 2025] [:error] [pid 804:tid 808] [client 98.81.111.26:56372] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/home"] [unique_id "aR6UyfaRHpUlPL9O0Lk3HwAAAYI"]
[Thu Nov 20 12:10:49.753062 2025] [:error] [pid 55340:tid 55349] [client 98.81.111.26:61180] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/home"] [unique_id "aR6UyfOxD-NeMydTybBLDQAAAAQ"]
[Thu Nov 20 12:10:50.159028 2025] [:error] [pid 55340:tid 55369] [client 98.81.111.26:59893] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/home"] [unique_id "aR6UyvOxD-NeMydTybBLFgAAABg"]
[Thu Nov 20 12:10:50.563818 2025] [:error] [pid 55430:tid 55454] [client 98.81.111.26:54906] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tmp"] [unique_id "aR6UyvPZXaIMEU4pE7uiXQAAANU"]
[Thu Nov 20 12:10:50.969602 2025] [:error] [pid 55342:tid 55376] [client 98.81.111.26:50723] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tmp"] [unique_id "aR6Uyrg6x32Tvk7fIG-NRAAAAEQ"]
[Thu Nov 20 12:10:51.373330 2025] [:error] [pid 55342:tid 55395] [client 98.81.111.26:56255] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tmp"] [unique_id "aR6Uy7g6x32Tvk7fIG-NTQAAAFc"]
[Thu Nov 20 12:10:51.778151 2025] [:error] [pid 804:tid 835] [client 98.81.111.26:60957] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tmp"] [unique_id "aR6Uy_aRHpUlPL9O0Lk3NQAAAYs"]
[Thu Nov 20 12:10:52.191576 2025] [:error] [pid 804:tid 841] [client 98.81.111.26:61792] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tmp"] [unique_id "aR6UzPaRHpUlPL9O0Lk3OAAAAZE"]
[Thu Nov 20 12:10:52.594820 2025] [:error] [pid 55342:tid 55376] [client 98.81.111.26:60321] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/dev"] [unique_id "aR6UzLg6x32Tvk7fIG-NWQAAAEQ"]
[Thu Nov 20 12:10:53.000145 2025] [:error] [pid 804:tid 839] [client 98.81.111.26:57586] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/dev"] [unique_id "aR6UzPaRHpUlPL9O0Lk3PAAAAY8"]
[Thu Nov 20 12:10:53.410361 2025] [:error] [pid 804:tid 844] [client 98.81.111.26:59248] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/dev"] [unique_id "aR6UzfaRHpUlPL9O0Lk3QQAAAZQ"]
[Thu Nov 20 12:10:53.818171 2025] [:error] [pid 34444:tid 34459] [client 98.81.111.26:63474] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/dev"] [unique_id "aR6UzVNEol4jlmmA_GPyawAAAU0"]
[Thu Nov 20 12:10:54.220468 2025] [:error] [pid 55343:tid 55405] [client 98.81.111.26:60357] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/dev"] [unique_id "aR6UzlWlO3EnyVMV7w5mYQAAAIY"]
[Thu Nov 20 12:10:54.626383 2025] [:error] [pid 804:tid 846] [client 98.81.111.26:53346] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cms"] [unique_id "aR6UzvaRHpUlPL9O0Lk3SAAAAZY"]
[Thu Nov 20 12:10:55.030801 2025] [:error] [pid 34444:tid 34458] [client 98.81.111.26:58740] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cms"] [unique_id "aR6Uz1NEol4jlmmA_GPyfAAAAUw"]
[Thu Nov 20 12:10:55.437229 2025] [:error] [pid 55340:tid 55354] [client 98.81.111.26:55869] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cms"] [unique_id "aR6Uz_OxD-NeMydTybBLOgAAAAk"]
[Thu Nov 20 12:10:55.841461 2025] [:error] [pid 804:tid 824] [client 98.81.111.26:56725] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cms"] [unique_id "aR6Uz_aRHpUlPL9O0Lk3UgAAAYg"]
[Thu Nov 20 12:10:56.246126 2025] [:error] [pid 34405:tid 34414] [client 98.81.111.26:49457] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cms"] [unique_id "aR6U0DFpvu8oRK7ATfvKrQAAAQc"]
[Thu Nov 20 12:10:56.651572 2025] [:error] [pid 55343:tid 55415] [client 98.81.111.26:61526] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/portal"] [unique_id "aR6U0FWlO3EnyVMV7w5mewAAAJA"]
[Thu Nov 20 12:10:57.055354 2025] [:error] [pid 55343:tid 55403] [client 98.81.111.26:55746] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/portal"] [unique_id "aR6U0VWlO3EnyVMV7w5mfgAAAIQ"]
[Thu Nov 20 12:10:57.459438 2025] [:error] [pid 34405:tid 34430] [client 98.81.111.26:64203] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/portal"] [unique_id "aR6U0TFpvu8oRK7ATfvKvwAAARc"]
[Thu Nov 20 12:10:57.864303 2025] [:error] [pid 55340:tid 55367] [client 98.81.111.26:61526] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/portal"] [unique_id "aR6U0fOxD-NeMydTybBLVQAAABY"]
[Thu Nov 20 12:10:58.269353 2025] [:error] [pid 34444:tid 34446] [client 98.81.111.26:57139] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/portal"] [unique_id "aR6U0lNEol4jlmmA_GPymgAAAUA"]
[Thu Nov 20 12:10:58.677121 2025] [:error] [pid 34405:tid 34430] [client 98.81.111.26:58577] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/web"] [unique_id "aR6U0jFpvu8oRK7ATfvK1AAAARc"]
[Thu Nov 20 12:10:59.081246 2025] [:error] [pid 55343:tid 55399] [client 98.81.111.26:62383] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/web"] [unique_id "aR6U01WlO3EnyVMV7w5mlgAAAIA"]
[Thu Nov 20 12:10:59.485289 2025] [:error] [pid 55340:tid 55357] [client 98.81.111.26:65185] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/web"] [unique_id "aR6U0_OxD-NeMydTybBLYwAAAAw"]
[Thu Nov 20 12:10:59.890338 2025] [:error] [pid 55430:tid 55454] [client 98.81.111.26:60107] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/web"] [unique_id "aR6U0_PZXaIMEU4pE7uivwAAANU"]
[Thu Nov 20 12:11:00.296650 2025] [:error] [pid 55430:tid 55453] [client 98.81.111.26:61718] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/web"] [unique_id "aR6U1PPZXaIMEU4pE7uiwQAAANQ"]
[Thu Nov 20 23:01:30.619119 2025] [:error] [pid 55342:tid 55392] [client 213.21.239.4:43430] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aR8tSrg6x32Tvk7fIG8RMQAAAFQ"]
[Fri Nov 21 06:36:08.949721 2025] [:error] [pid 17882:tid 17888] [client 81.155.64.21:55050] [client 81.155.64.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.155.64.21, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aR-X2IwFFssEn348h94NdAAAAUQ"]
[Fri Nov 21 06:36:08.956422 2025] [:error] [pid 17882:tid 17888] [client 81.155.64.21:55050] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Nov 21 13:51:04.647979 2025] [:error] [pid 46237:tid 46256] [client 145.239.10.137:56489] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php, referer: http://aircraft-spruce.com.au/natural.php
[Fri Nov 21 14:21:40.892392 2025] [:error] [pid 46276:tid 46292] [client 213.21.239.4:43284] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSAE9HbpxuSAfajqqKP4JQAAAgk"]
[Fri Nov 21 15:01:38.676250 2025] [:error] [pid 25429:tid 25454] [client 213.21.239.4:57856] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSAOUj4rZbRSr7vu-NODNgAAABU"]
[Fri Nov 21 15:20:54.642384 2025] [:error] [pid 25431:tid 25502] [client 213.21.239.4:50538] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAS1sklhXxmoIExII0QyQAAAI8"]
[Fri Nov 21 16:00:39.276794 2025] [:error] [pid 25554:tid 25574] [client 213.21.239.4:44264] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAcJx-NtB-9AzFZrk5TGQAAARA"]
[Fri Nov 21 16:31:56.807635 2025] [:error] [pid 25430:tid 25469] [client 211.115.73.186:35206] [client 211.115.73.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.115.73.186, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSAjfKpnWJcWt_4foXlSPwAAAEk"]
[Fri Nov 21 16:31:56.811450 2025] [:error] [pid 25430:tid 25469] [client 211.115.73.186:35206] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 16:31:57.664637 2025] [:error] [pid 25431:tid 25499] [client 211.115.73.186:35312] [client 211.115.73.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.115.73.186, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSAjfcklhXxmoIExII1F2AAAAIw"]
[Fri Nov 21 16:31:57.670831 2025] [:error] [pid 25431:tid 25499] [client 211.115.73.186:35312] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 16:57:42.837377 2025] [:error] [pid 25521:tid 25540] [client 45.76.243.176:59706] [client 45.76.243.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.76.243.176, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSAphvhXnBMilDddn3X_ugAAANE"]
[Fri Nov 21 16:57:42.840956 2025] [:error] [pid 25521:tid 25540] [client 45.76.243.176:59706] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 16:57:43.598490 2025] [:error] [pid 25431:tid 25493] [client 45.76.243.176:59718] [client 45.76.243.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.76.243.176, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSAph8klhXxmoIExII1OUgAAAIY"]
[Fri Nov 21 16:57:43.605228 2025] [:error] [pid 25431:tid 25493] [client 45.76.243.176:59718] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 18:29:36.946689 2025] [:error] [pid 25431:tid 25492] [client 160.30.252.37:39300] [client 160.30.252.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.30.252.37, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSA_EMklhXxmoIExII1t5QAAAIU"]
[Fri Nov 21 18:29:36.950302 2025] [:error] [pid 25431:tid 25492] [client 160.30.252.37:39300] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 18:29:37.608470 2025] [:error] [pid 25429:tid 25453] [client 160.30.252.37:39310] [client 160.30.252.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.30.252.37, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSA_ET4rZbRSr7vu-NPXAgAAABQ"]
[Fri Nov 21 18:29:37.615039 2025] [:error] [pid 25429:tid 25453] [client 160.30.252.37:39310] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 18:45:31.746698 2025] [:error] [pid 25431:tid 25488] [client 104.28.240.83:18245] [client 104.28.240.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.83, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSBCy8klhXxmoIExII1y6QAAAIE"]
[Fri Nov 21 18:45:31.748926 2025] [:error] [pid 25431:tid 25488] [client 104.28.240.83:18245] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 20:27:55.886357 2025] [:error] [pid 25554:tid 25575] [client 92.53.96.37:60360] [client 92.53.96.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.53.96.37, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSBayx-NtB-9AzFZrk6lzQAAARE"]
[Fri Nov 21 20:27:55.890037 2025] [:error] [pid 25554:tid 25575] [client 92.53.96.37:60360] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 20:27:57.149307 2025] [:error] [pid 25429:tid 25442] [client 92.53.96.37:60368] [client 92.53.96.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.53.96.37, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSBazT4rZbRSr7vu-NP02AAAAAk"]
[Fri Nov 21 20:27:57.155709 2025] [:error] [pid 25429:tid 25442] [client 92.53.96.37:60368] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 21:21:20.518790 2025] [:error] [pid 25554:tid 25582] [client 43.231.0.82:35880] [client 43.231.0.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.231.0.82, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSBnUB-NtB-9AzFZrk6ymwAAARg"]
[Fri Nov 21 21:21:20.522412 2025] [:error] [pid 25554:tid 25582] [client 43.231.0.82:35880] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 21:21:22.870777 2025] [:error] [pid 46939:tid 46955] [client 43.231.0.82:35946] [client 43.231.0.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.231.0.82, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSBnUu0OmVoxD4VZ_Zn1FAAAAU0"]
[Fri Nov 21 21:21:22.876745 2025] [:error] [pid 46939:tid 46955] [client 43.231.0.82:35946] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 22:56:20.012217 2025] [:error] [pid 46939:tid 46960] [client 159.203.163.116:48640] [client 159.203.163.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSB9lO0OmVoxD4VZ_ZkTvgAAAVI"]
[Sat Nov 22 00:50:30.503682 2025] [:error] [pid 9180:tid 9194] [client 4.210.246.247:54128] [client 4.210.246.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.210.246.247, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSCYVrrk9msixUFV2i-AEgAAAEw"]
[Sat Nov 22 00:50:30.509505 2025] [:error] [pid 9180:tid 9194] [client 4.210.246.247:54128] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 02:22:24.239477 2025] [:error] [pid 9180:tid 9194] [client 106.222.224.232:7912] [client 106.222.224.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.224.232, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aSCt4Lrk9msixUFV2i-wfgAAAEw"]
[Sat Nov 22 02:22:24.247493 2025] [:error] [pid 9180:tid 9194] [client 106.222.224.232:7912] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Nov 22 02:36:21.066149 2025] [:error] [pid 14291:tid 14297] [client 159.203.163.116:53652] [client 159.203.163.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSCxJUEjlvzqoJBTM9gTYAAAAUQ"]
[Sat Nov 22 03:52:51.945520 2025] [:error] [pid 53479:tid 53552] [client 103.167.150.158:59660] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSDDE26cicFF3Aas-oQ7uAAAAJA"]
[Sat Nov 22 05:04:51.603052 2025] [:error] [pid 53478:tid 53515] [client 122.180.248.182:60598] [client 122.180.248.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 122.180.248.182, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSDT8whUYdXBbQswAdT4EQAAAEY"]
[Sat Nov 22 05:04:51.608431 2025] [:error] [pid 53478:tid 53515] [client 122.180.248.182:60598] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 05:04:53.449741 2025] [:error] [pid 53566:tid 53570] [client 122.180.248.182:60606] [client 122.180.248.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 122.180.248.182, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSDT9cbSHDBkRbwMbd4bmQAAAMI"]
[Sat Nov 22 05:04:53.457604 2025] [:error] [pid 53566:tid 53570] [client 122.180.248.182:60606] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 06:56:48.419911 2025] [:error] [pid 25856:tid 25870] [client 212.116.231.26:52094] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Nov 22 06:56:48.826441 2025] [:error] [pid 25856:tid 25863] [client 212.116.231.26:52094] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless.php"] [unique_id "aSDuMBsTP0wy94zKUvHntgAAAQU"]
[Sat Nov 22 06:56:49.637293 2025] [:error] [pid 53477:tid 53485] [client 212.116.231.26:45574] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless.php"] [unique_id "aSDuMX7Lu30Ku9O40aIHGAAAAAQ"]
[Sat Nov 22 06:56:50.450961 2025] [:error] [pid 53479:tid 53536] [client 212.116.231.26:46088] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless.php"] [unique_id "aSDuMm6cicFF3Aas-oShxgAAAIA"]
[Sat Nov 22 06:56:51.291586 2025] [:error] [pid 25856:tid 25870] [client 212.116.231.26:46574] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless.php"] [unique_id "aSDuMxsTP0wy94zKUvHn-gAAAQw"]
[Sat Nov 22 06:56:52.121243 2025] [:error] [pid 53566:tid 53586] [client 212.116.231.26:47084] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless.php"] [unique_id "aSDuNMbSHDBkRbwMbd5n8gAAANI"]
[Sat Nov 22 06:56:52.955014 2025] [:error] [pid 53477:tid 53495] [client 212.116.231.26:47474] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNH7Lu30Ku9O40aIHNwAAAA4"]
[Sat Nov 22 06:56:53.794991 2025] [:error] [pid 25856:tid 25863] [client 212.116.231.26:47976] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNRsTP0wy94zKUvHoGgAAAQU"]
[Sat Nov 22 06:56:54.630965 2025] [:error] [pid 25856:tid 25861] [client 212.116.231.26:48382] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNhsTP0wy94zKUvHoJAAAAQM"]
[Sat Nov 22 06:56:55.496003 2025] [:error] [pid 53477:tid 53484] [client 212.116.231.26:48720] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuN37Lu30Ku9O40aIHYgAAAAM"]
[Sat Nov 22 06:56:56.305925 2025] [:error] [pid 53566:tid 53569] [client 212.116.231.26:48966] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuOMbSHDBkRbwMbd5oJQAAAME"]
[Sat Nov 22 08:46:13.443438 2025] [:error] [pid 53477:tid 53501] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Nov 22 08:46:13.649523 2025] [:error] [pid 53477:tid 53502] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Nov 22 08:46:13.866767 2025] [:error] [pid 53477:tid 53485] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Nov 22 08:46:14.020369 2025] [:error] [pid 53477:tid 53496] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Nov 22 08:46:14.201733 2025] [:error] [pid 53477:tid 53498] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Nov 22 08:46:14.322489 2025] [:error] [pid 53477:tid 53493] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Nov 22 08:46:14.474688 2025] [:error] [pid 53477:tid 53486] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Nov 22 08:46:14.663807 2025] [:error] [pid 53477:tid 53505] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Nov 22 08:46:14.930906 2025] [:error] [pid 53477:tid 53484] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Nov 22 08:46:15.198108 2025] [:error] [pid 53477:tid 53499] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Nov 22 08:46:15.313407 2025] [:error] [pid 53477:tid 53490] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Nov 22 08:46:15.513847 2025] [:error] [pid 53477:tid 53504] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Nov 22 08:46:15.650443 2025] [:error] [pid 53477:tid 53494] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Nov 22 08:46:15.746761 2025] [:error] [pid 53477:tid 53487] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Nov 22 08:46:15.948753 2025] [:error] [pid 53477:tid 53489] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Nov 22 08:46:16.086207 2025] [:error] [pid 53477:tid 53495] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Nov 22 08:46:16.194787 2025] [:error] [pid 53477:tid 53501] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Nov 22 08:46:16.373625 2025] [:error] [pid 53477:tid 53502] [client 194.5.82.107:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Nov 22 08:46:18.466465 2025] [:error] [pid 53477:tid 53504] [client 194.5.82.107:58971] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSEH2n7Lu30Ku9O40aInPAAAABc"]
[Sat Nov 22 13:19:13.010945 2025] [:error] [pid 25856:tid 25868] [client 43.231.0.82:48222] [client 43.231.0.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.231.0.82, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSFH0RsTP0wy94zKUvFh3wAAAQo"]
[Sat Nov 22 13:19:13.013360 2025] [:error] [pid 25856:tid 25868] [client 43.231.0.82:48222] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 13:19:13.979402 2025] [:error] [pid 9547:tid 9577] [client 43.231.0.82:48334] [client 43.231.0.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.231.0.82, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSFH0dClOR5qk7DoMeFH8wAAAVg"]
[Sat Nov 22 13:19:13.985779 2025] [:error] [pid 9547:tid 9577] [client 43.231.0.82:48334] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 16:31:39.894586 2025] [:error] [pid 53478:tid 53512] [client 222.253.48.28:49658] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSF06whUYdXBbQswAdTUJgAAAEM"]
[Sat Nov 22 16:31:39.898436 2025] [:error] [pid 53478:tid 53512] [client 222.253.48.28:49658] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 16:31:45.876152 2025] [:error] [pid 53477:tid 53491] [client 222.253.48.28:57166] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSF08X7Lu30Ku9O40aKVSAAAAAo"]
[Sat Nov 22 16:31:45.883147 2025] [:error] [pid 53477:tid 53491] [client 222.253.48.28:57166] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 20:32:02.220495 2025] [:error] [pid 53566:tid 53582] [client 188.13.240.147:35348] [client 188.13.240.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.13.240.147, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSGtQsbSHDBkRbwMbd5P6QAAAM4"]
[Sat Nov 22 20:32:02.225200 2025] [:error] [pid 53566:tid 53582] [client 188.13.240.147:35348] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 20:32:03.954684 2025] [:error] [pid 53478:tid 53510] [client 188.13.240.147:35364] [client 188.13.240.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.13.240.147, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSGtQwhUYdXBbQswAdQaVgAAAEE"]
[Sat Nov 22 20:32:03.963156 2025] [:error] [pid 53478:tid 53510] [client 188.13.240.147:35364] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 00:18:57.941429 2025] [:error] [pid 25856:tid 25860] [client 189.91.199.187:24176] [client 189.91.199.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.91.199.187, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aSHicRsTP0wy94zKUvEcMgAAAQI"]
[Sun Nov 23 00:18:57.946066 2025] [:error] [pid 25856:tid 25860] [client 189.91.199.187:24176] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Nov 23 01:27:03.323295 2025] [:error] [pid 39942:tid 40017] [client 216.126.225.91:38720] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSHyZ6NupsOsQf9D2gxaCgAAAVY"]
[Sun Nov 23 02:07:12.466370 2025] [:error] [pid 39719:tid 39790] [client 167.71.203.246:54100] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Nov 23 02:13:17.154670 2025] [:error] [pid 39713:tid 39742] [client 90.156.142.131:26254] [client 90.156.142.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.142.131, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSH9PUUgrb325CIAjPqroAAAABU"]
[Sun Nov 23 02:13:17.158691 2025] [:error] [pid 39713:tid 39742] [client 90.156.142.131:26254] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 02:13:18.674575 2025] [:error] [pid 39713:tid 39727] [client 90.156.142.131:26278] [client 90.156.142.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.142.131, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSH9PkUgrb325CIAjPqrowAAAAY"]
[Sun Nov 23 02:13:18.681060 2025] [:error] [pid 39713:tid 39727] [client 90.156.142.131:26278] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 04:01:07.104156 2025] [:error] [pid 56275:tid 56283] [client 103.163.161.30:62109] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/style.php"] [unique_id "aSIWg7haClcAPg7VXOSFAAAAAMQ"]
[Sun Nov 23 04:01:07.374494 2025] [:error] [pid 56176:tid 56192] [client 103.163.161.30:62186] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/style.php"] [unique_id "aSIWg7jUOh400lKsKrFWJwAAAAU"]
[Sun Nov 23 04:01:07.647441 2025] [:error] [pid 56181:tid 56265] [client 103.163.161.30:62263] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aSIWg8kLwhNGnt-ns6aTcQAAAJg"]
[Sun Nov 23 04:01:07.906812 2025] [:error] [pid 56178:tid 56228] [client 103.163.161.30:62289] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/style.php"] [unique_id "aSIWg5zQAXWPTUeTK1RgYgAAAE4"]
[Sun Nov 23 04:01:08.187088 2025] [:error] [pid 56275:tid 56283] [client 103.163.161.30:62349] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/style.php"] [unique_id "aSIWhLhaClcAPg7VXOSFDQAAAMQ"]
[Sun Nov 23 04:01:10.237702 2025] [:error] [pid 56178:tid 56233] [client 103.163.161.30:62955] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/chosen.php"] [unique_id "aSIWhpzQAXWPTUeTK1RgdgAAAFM"]
[Sun Nov 23 04:01:10.486514 2025] [:error] [pid 56275:tid 56286] [client 103.163.161.30:62991] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/file.php"] [unique_id "aSIWhrhaClcAPg7VXOSFJAAAAMc"]
[Sun Nov 23 04:01:10.752645 2025] [:error] [pid 56275:tid 56284] [client 103.163.161.30:63068] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/flower.php"] [unique_id "aSIWhrhaClcAPg7VXOSFMgAAAMU"]
[Sun Nov 23 04:01:11.031822 2025] [:error] [pid 56178:tid 56223] [client 103.163.161.30:63294] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/gifclass.php"] [unique_id "aSIWh5zQAXWPTUeTK1RghAAAAEk"]
[Sun Nov 23 04:01:11.337987 2025] [:error] [pid 56178:tid 56237] [client 103.163.161.30:63398] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/bless.php"] [unique_id "aSIWh5zQAXWPTUeTK1RglwAAAFc"]
[Sun Nov 23 04:01:11.608077 2025] [:error] [pid 56275:tid 56286] [client 103.163.161.30:63539] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/class-t.api.php"] [unique_id "aSIWh7haClcAPg7VXOSFRAAAAMc"]
[Sun Nov 23 04:01:11.880287 2025] [:error] [pid 56178:tid 56227] [client 103.163.161.30:63656] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/blurbs.php"] [unique_id "aSIWh5zQAXWPTUeTK1RgpgAAAE0"]
[Sun Nov 23 04:01:12.162135 2025] [:error] [pid 56275:tid 56294] [client 103.163.161.30:63734] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/akcc.php"] [unique_id "aSIWiLhaClcAPg7VXOSFTwAAAM8"]
[Sun Nov 23 04:01:12.427608 2025] [:error] [pid 56176:tid 56202] [client 103.163.161.30:63816] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/abcd.php"] [unique_id "aSIWiLjUOh400lKsKrFWXAAAAA8"]
[Sun Nov 23 04:01:12.688055 2025] [:error] [pid 56275:tid 56299] [client 103.163.161.30:63962] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/shelp.php"] [unique_id "aSIWiLhaClcAPg7VXOSFaQAAANQ"]
[Sun Nov 23 04:01:12.953671 2025] [:error] [pid 56178:tid 56215] [client 103.163.161.30:64077] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/cord.php"] [unique_id "aSIWiJzQAXWPTUeTK1RgxgAAAEE"]
[Sun Nov 23 04:01:13.219019 2025] [:error] [pid 56178:tid 56217] [client 103.163.161.30:64127] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/dex.php"] [unique_id "aSIWiZzQAXWPTUeTK1Rg0gAAAEM"]
[Sun Nov 23 04:01:13.468845 2025] [:error] [pid 56176:tid 56211] [client 103.163.161.30:64257] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSIWibjUOh400lKsKrFWbwAAABg"]
[Sun Nov 23 04:01:13.723729 2025] [:error] [pid 56181:tid 56258] [client 103.163.161.30:64451] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/file2.php"] [unique_id "aSIWickLwhNGnt-ns6aTvgAAAJE"]
[Sun Nov 23 04:01:13.975183 2025] [:error] [pid 56178:tid 56218] [client 103.163.161.30:64568] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/zwso.php"] [unique_id "aSIWiZzQAXWPTUeTK1Rg5AAAAEQ"]
[Sun Nov 23 04:01:16.021082 2025] [:error] [pid 56275:tid 56288] [client 103.163.161.30:49352] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "aSIWjLhaClcAPg7VXOSFjQAAAMk"]
[Sun Nov 23 04:01:16.323509 2025] [:error] [pid 56275:tid 56293] [client 103.163.161.30:49514] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aSIWjLhaClcAPg7VXOSFmAAAAM4"]
[Sun Nov 23 04:01:16.606138 2025] [:error] [pid 56181:tid 56242] [client 103.163.161.30:49600] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/bolt.php"] [unique_id "aSIWjMkLwhNGnt-ns6aUBgAAAIE"]
[Sun Nov 23 04:01:16.913645 2025] [:error] [pid 56178:tid 56221] [client 103.163.161.30:49823] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/shlo.php"] [unique_id "aSIWjJzQAXWPTUeTK1RhKAAAAEc"]
[Sun Nov 23 04:01:17.189746 2025] [:error] [pid 56181:tid 56254] [client 103.163.161.30:49957] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/133.php"] [unique_id "aSIWjckLwhNGnt-ns6aUIgAAAI0"]
[Sun Nov 23 04:01:17.480724 2025] [:error] [pid 56181:tid 56261] [client 103.163.161.30:50099] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/ahax.php"] [unique_id "aSIWjckLwhNGnt-ns6aUMgAAAJQ"]
[Sun Nov 23 04:01:17.733826 2025] [:error] [pid 56176:tid 56199] [client 103.163.161.30:50261] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/php8.php"] [unique_id "aSIWjbjUOh400lKsKrFWvAAAAAw"]
[Sun Nov 23 04:01:17.982239 2025] [:error] [pid 56176:tid 56206] [client 103.163.161.30:50504] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/lufix1.php"] [unique_id "aSIWjbjUOh400lKsKrFWwwAAABM"]
[Sun Nov 23 04:01:18.258396 2025] [:error] [pid 56176:tid 56198] [client 103.163.161.30:50544] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/witmm.php"] [unique_id "aSIWjrjUOh400lKsKrFWyAAAAAs"]
[Sun Nov 23 04:01:18.528765 2025] [:error] [pid 56181:tid 56255] [client 103.163.161.30:50773] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aSIWjskLwhNGnt-ns6aUWAAAAI4"]
[Sun Nov 23 04:01:18.777155 2025] [:error] [pid 56181:tid 56242] [client 103.163.161.30:50853] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSIWjskLwhNGnt-ns6aUZwAAAIE"]
[Sun Nov 23 04:01:19.061315 2025] [:error] [pid 56181:tid 56243] [client 103.163.161.30:50928] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/index.php"] [unique_id "aSIWj8kLwhNGnt-ns6aUdAAAAII"]
[Sun Nov 23 04:01:19.356321 2025] [:error] [pid 56181:tid 56265] [client 103.163.161.30:51030] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/ioxi-o.php"] [unique_id "aSIWj8kLwhNGnt-ns6aUfQAAAJg"]
[Sun Nov 23 04:01:19.624037 2025] [:error] [pid 56275:tid 56298] [client 103.163.161.30:51103] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/222.php"] [unique_id "aSIWj7haClcAPg7VXOSFvwAAANM"]
[Sun Nov 23 04:01:19.913197 2025] [:error] [pid 56181:tid 56256] [client 103.163.161.30:51311] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/files.php"] [unique_id "aSIWj8kLwhNGnt-ns6aUlQAAAI8"]
[Sun Nov 23 04:01:20.155361 2025] [:error] [pid 56178:tid 56235] [client 103.163.161.30:51547] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-editor.php"] [unique_id "aSIWkJzQAXWPTUeTK1RhVwAAAFU"]
[Sun Nov 23 04:17:15.381337 2025] [:error] [pid 59608:tid 59667] [client 173.239.254.67:58673] [client 173.239.254.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.67, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSIaS3TmAN9zdve8K0DgagAAAE0"]
[Sun Nov 23 04:17:15.385248 2025] [:error] [pid 59608:tid 59667] [client 173.239.254.67:58673] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 06:37:30.807182 2025] [:error] [pid 38739:tid 38775] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://duckduckgo.com/
[Sun Nov 23 06:37:30.998640 2025] [:error] [pid 38739:tid 38785] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://duckduckgo.com/
[Sun Nov 23 06:37:31.208122 2025] [:error] [pid 38739:tid 38788] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://duckduckgo.com/
[Sun Nov 23 06:37:31.442197 2025] [:error] [pid 38739:tid 38790] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.com/
[Sun Nov 23 06:37:31.642999 2025] [:error] [pid 38739:tid 38769] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.bing.com/
[Sun Nov 23 06:37:31.833795 2025] [:error] [pid 38739:tid 38793] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.bing.com/
[Sun Nov 23 06:37:32.216796 2025] [:error] [pid 38739:tid 38786] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.fr/
[Sun Nov 23 06:37:32.408520 2025] [:error] [pid 38739:tid 38779] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.yahoo.com/
[Sun Nov 23 06:37:32.599260 2025] [:error] [pid 38739:tid 38777] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://duckduckgo.com/
[Sun Nov 23 06:37:32.789876 2025] [:error] [pid 38739:tid 38775] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.de/
[Sun Nov 23 06:37:32.993882 2025] [:error] [pid 38739:tid 38787] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.google.fr/
[Sun Nov 23 06:37:33.190531 2025] [:error] [pid 38739:tid 38770] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.yahoo.com/
[Sun Nov 23 06:37:33.380860 2025] [:error] [pid 38739:tid 38790] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.de/
[Sun Nov 23 06:37:33.762629 2025] [:error] [pid 38739:tid 38782] [client 172.202.36.251:32909] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.yahoo.com/
[Sun Nov 23 06:37:33.949746 2025] [:error] [pid 38739:tid 38793] [client 172.202.36.251:32909] [client 172.202.36.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSI7LQdvEgJm2n2cDmocigAAAFg"], referer: https://www.google.co.uk/
[Sun Nov 23 06:37:34.597096 2025] [:error] [pid 44652:tid 44722] [client 172.202.36.251:14341] [client 172.202.36.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSI7LtiQFwsyXQDhwyDb3wAAARA"], referer: https://www.google.fr/
[Sun Nov 23 06:37:35.166528 2025] [:error] [pid 38738:tid 38763] [client 172.202.36.251:32921] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php, referer: https://www.google.co.uk/
[Sun Nov 23 06:37:35.548325 2025] [:error] [pid 38738:tid 38748] [client 172.202.36.251:32921] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wso112233.php, referer: https://www.google.co.uk/
[Sun Nov 23 06:37:36.495354 2025] [:error] [pid 38738:tid 38754] [client 172.202.36.251:32921] [client 172.202.36.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSI7MAytc6TL9XavPmPg5AAAAAw"], referer: https://www.google.fr/
[Sun Nov 23 06:37:37.604621 2025] [:error] [pid 44652:tid 44730] [client 172.202.36.251:57934] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php, referer: https://www.google.com/
[Sun Nov 23 06:37:37.988737 2025] [:error] [pid 44652:tid 44711] [client 172.202.36.251:57934] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/shell20211028.php, referer: https://www.google.fr/
[Sun Nov 23 06:37:38.938488 2025] [:error] [pid 44652:tid 44719] [client 172.202.36.251:57934] [client 172.202.36.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSI7MtiQFwsyXQDhwyDb8AAAAQ0"], referer: https://duckduckgo.com/
[Sun Nov 23 06:37:39.893078 2025] [:error] [pid 38739:tid 38789] [client 172.202.36.251:14888] File does not exist: /usr/local/apache/htdocs/suspended-page/bala.php, referer: https://duckduckgo.com/
[Sun Nov 23 06:37:40.388467 2025] [:error] [pid 38739:tid 38770] [client 172.202.36.251:14888] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/bala.php, referer: https://www.bing.com/
[Sun Nov 23 06:37:41.351371 2025] [:error] [pid 38739:tid 38783] [client 172.202.36.251:14888] [client 172.202.36.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/bala.php"] [unique_id "aSI7NQdvEgJm2n2cDmocnwAAAE4"], referer: https://www.yahoo.com/
[Sun Nov 23 06:37:42.225220 2025] [:error] [pid 38738:tid 38747] [client 172.202.36.251:57955] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.yahoo.com/
[Sun Nov 23 06:37:42.599698 2025] [:error] [pid 38738:tid 38753] [client 172.202.36.251:57955] [client 172.202.36.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSI7Ngytc6TL9XavPmPg8QAAAAs"], referer: https://duckduckgo.com/
[Sun Nov 23 11:26:08.583158 2025] [:error] [pid 38738:tid 38751] [client 20.199.41.85:51766] [client 20.199.41.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env"] [unique_id "aSJ-0Aytc6TL9XavPmNNIQAAAAk"]
[Sun Nov 23 16:03:08.266062 2025] [:error] [pid 38740:tid 38796] [client 211.115.73.186:36296] [client 211.115.73.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.115.73.186, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSK_vA13QPZSi6O8umVaEwAAAIA"]
[Sun Nov 23 16:03:08.270144 2025] [:error] [pid 38740:tid 38796] [client 211.115.73.186:36296] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 16:03:09.175433 2025] [:error] [pid 38738:tid 38752] [client 211.115.73.186:36486] [client 211.115.73.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.115.73.186, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSK_vQytc6TL9XavPmO6NgAAAAo"]
[Sun Nov 23 16:03:09.185608 2025] [:error] [pid 38738:tid 38752] [client 211.115.73.186:36486] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 16:46:49.351345 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.32:44681] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Nov 23 16:46:49.470603 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.32:44681] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Nov 23 16:46:49.590691 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.32:44681] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Nov 23 16:46:49.752067 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.32:44681] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Nov 23 16:46:50.220262 2025] [:error] [pid 44652:tid 44712] [client 140.99.1.32:44681] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Nov 23 16:46:50.315978 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.32:44681] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Nov 23 16:46:50.413101 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.32:44681] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Nov 23 16:46:50.525579 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.32:44681] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 23 16:46:51.063131 2025] [:error] [pid 16066:tid 16089] [client 140.99.1.63:37871] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Nov 23 16:46:51.370288 2025] [:error] [pid 16066:tid 16087] [client 140.99.1.63:37871] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Nov 23 16:46:51.484798 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.63:37871] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Nov 23 16:46:51.613803 2025] [:error] [pid 16066:tid 16085] [client 140.99.1.63:37871] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Nov 23 16:46:51.725310 2025] [:error] [pid 16066:tid 16090] [client 140.99.1.63:37871] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Nov 23 16:46:51.870795 2025] [:error] [pid 16066:tid 16075] [client 140.99.1.63:37871] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Nov 23 16:46:51.978127 2025] [:error] [pid 16066:tid 16073] [client 140.99.1.63:37871] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Nov 23 16:46:52.082901 2025] [:error] [pid 16066:tid 16083] [client 140.99.1.63:37871] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Nov 23 16:46:52.191969 2025] [:error] [pid 16066:tid 16081] [client 140.99.1.63:37871] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Nov 23 16:46:52.294953 2025] [:error] [pid 16066:tid 16071] [client 140.99.1.63:37871] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Nov 23 16:46:54.354182 2025] [:error] [pid 16066:tid 16071] [client 140.99.1.63:37871] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLJ_vq-c47Q5mW5E9F9fwAAAYI"]
[Sun Nov 23 16:46:55.035260 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.24:20749] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLJ_w13QPZSi6O8umWrIQAAAIg"]
[Sun Nov 23 16:46:55.741199 2025] [:error] [pid 14602:tid 14625] [client 140.99.1.63:41451] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Nov 23 16:46:56.153958 2025] [:error] [pid 14602:tid 14635] [client 140.99.1.63:41451] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "aircraft-spruce.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLKAB-I77jdD81pU-mpAAAAAU4"]
[Sun Nov 23 16:46:56.812979 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.65:57533] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Nov 23 16:46:56.943632 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.65:57533] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLKANiQFwsyXQDhwyC_2QAAARY"]
[Sun Nov 23 16:46:57.363281 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.53:37511] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Nov 23 16:46:58.158784 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.53:37511] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLKAg13QPZSi6O8umWrTwAAAIY"]
[Sun Nov 23 16:46:58.471873 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.48:58663] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLKAtiQFwsyXQDhwyC__wAAAQk"]
[Sun Nov 23 16:46:58.769167 2025] [:error] [pid 38824:tid 38847] [client 140.99.1.43:49371] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLKAk8WZjXLvbHTHPfFZQAAANQ"]
[Sun Nov 23 16:46:58.994513 2025] [:error] [pid 17534:tid 17554] [client 140.99.1.5:33337] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLKAnPX9nXBrhgM8swx2gAAAdI"]
[Sun Nov 23 16:46:59.306270 2025] [:error] [pid 17534:tid 17553] [client 140.99.1.37:56009] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLKA3PX9nXBrhgM8swx6wAAAdE"]
[Sun Nov 23 16:46:59.500320 2025] [:error] [pid 17534:tid 17548] [client 140.99.1.72:64535] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLKA3PX9nXBrhgM8swx-QAAAcw"]
[Sun Nov 23 16:47:00.001739 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.31:64633] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLKAw13QPZSi6O8umWrcAAAAIQ"]
[Sun Nov 23 16:47:00.295501 2025] [:error] [pid 16066:tid 16069] [client 140.99.1.72:37175] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Nov 23 16:47:00.623387 2025] [:error] [pid 16066:tid 16075] [client 140.99.1.72:37175] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "aircraft-spruce.com.au"] [uri "/filemanager.php"] [unique_id "aSLKBPq-c47Q5mW5E9F9zAAAAYY"]
[Sun Nov 23 16:47:01.204049 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.17:33621] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLKBU8WZjXLvbHTHPfFlQAAAMM"]
[Sun Nov 23 16:47:01.597294 2025] [:error] [pid 17534:tid 17548] [client 140.99.1.52:60031] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLKBXPX9nXBrhgM8swyYQAAAcw"]
[Sun Nov 23 16:47:01.844233 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.13:23705] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Nov 23 16:47:01.975242 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.13:23705] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLKBdiQFwsyXQDhwyDARQAAAQg"]
[Sun Nov 23 16:47:02.169457 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.32:58101] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Nov 23 16:47:02.643166 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.32:58101] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Nov 23 16:47:03.359736 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.32:58101] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLKBwytc6TL9XavPmMO-gAAAAw"]
[Sun Nov 23 16:47:03.552057 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.49:47605] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Nov 23 16:47:03.799118 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.49:47605] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLKBwytc6TL9XavPmMPAgAAABY"]
[Sun Nov 23 16:47:04.080452 2025] [:error] [pid 16066:tid 16085] [client 140.99.1.63:44561] [client 140.99.1.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/new.php"] [unique_id "aSLKB_q-c47Q5mW5E9F-CwAAAZA"]
[Sun Nov 23 16:47:04.324528 2025] [:error] [pid 17534:tid 17542] [client 140.99.1.46:37653] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Nov 23 16:47:04.595494 2025] [:error] [pid 17534:tid 17557] [client 140.99.1.46:37653] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLKCHPX9nXBrhgM8swzWgAAAdU"]
[Sun Nov 23 16:47:05.001170 2025] [:error] [pid 14602:tid 14621] [client 140.99.1.74:27815] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLKCR-I77jdD81pU-mpqgAAAUA"]
[Sun Nov 23 16:47:05.418272 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.28:34935] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Nov 23 16:47:05.569371 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.28:34935] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Nov 23 16:47:05.773954 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.28:34935] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLKCQ13QPZSi6O8umWr5QAAAIY"]
[Sun Nov 23 16:47:06.217843 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.18:21171] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLKCk8WZjXLvbHTHPfGGAAAAMw"]
[Sun Nov 23 16:47:06.695294 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.50:20857] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLKCgytc6TL9XavPmMPKgAAABY"]
[Sun Nov 23 16:47:06.984976 2025] [:error] [pid 44652:tid 44717] [client 140.99.1.69:42289] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLKCtiQFwsyXQDhwyDAlAAAAQs"]
[Sun Nov 23 16:47:07.203944 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.7:39473] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLKCwdvEgJm2n2cDmo8ZwAAAEw"]
[Sun Nov 23 16:47:07.811203 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.78:54465] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Nov 23 16:47:07.916930 2025] [:error] [pid 38739:tid 38772] [client 140.99.1.78:54465] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLKCwdvEgJm2n2cDmo8fAAAAEM"]
[Sun Nov 23 16:47:08.110250 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.37:37905] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLKDE8WZjXLvbHTHPfGNwAAAM4"]
[Sun Nov 23 16:47:08.385708 2025] [:error] [pid 17534:tid 17546] [client 140.99.1.69:36545] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLKDHPX9nXBrhgM8sw0FQAAAco"]
[Sun Nov 23 16:47:09.060680 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.75:64849] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Nov 23 16:47:09.371690 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.75:64849] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Nov 23 16:47:09.817300 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.75:64849] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLKDU8WZjXLvbHTHPfGVgAAAME"]
[Sun Nov 23 16:47:10.412936 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.18:35085] [client 140.99.1.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.18, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLKDtiQFwsyXQDhwyDA2gAAARA"]
[Sun Nov 23 16:47:10.593418 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.18:35085] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Nov 23 16:47:11.251935 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.18:35085] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Nov 23 16:47:11.408880 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.18:35085] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Nov 23 16:47:12.133009 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.18:35085] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLKENiQFwsyXQDhwyDBBgAAARQ"]
[Sun Nov 23 16:47:12.544889 2025] [:error] [pid 17534:tid 17557] [client 140.99.1.62:32093] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Nov 23 16:47:12.661937 2025] [:error] [pid 17534:tid 17551] [client 140.99.1.62:32093] [client 140.99.1.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.62, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLKEHPX9nXBrhgM8sw0wgAAAc8"]
[Sun Nov 23 16:47:12.889832 2025] [:error] [pid 17534:tid 17557] [client 140.99.1.62:32093] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLKEHPX9nXBrhgM8sw0ywAAAdU"]
[Sun Nov 23 16:47:13.793831 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.2:31029] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Nov 23 16:47:23.271521 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.2:31029] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sun Nov 23 16:47:23.577308 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.2:31029] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLKG9iQFwsyXQDhwyDCJQAAAQo"]
[Sun Nov 23 16:47:23.805863 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.27:24773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Nov 23 16:47:24.271475 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.27:24773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Nov 23 16:47:24.482208 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.27:24773] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Nov 23 16:47:24.733792 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.27:24773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Nov 23 16:47:24.824266 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.27:24773] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLKHA13QPZSi6O8umWtNQAAAIE"]
[Sun Nov 23 16:47:25.203278 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.43:28879] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Nov 23 16:47:25.395697 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.43:28879] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Nov 23 16:47:25.536377 2025] [:error] [pid 14602:tid 14630] [client 140.99.1.43:28879] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLKHR-I77jdD81pU-mr2QAAAUk"]
[Sun Nov 23 16:47:25.866470 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.77:56163] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Nov 23 16:47:26.160019 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.77:56163] [client 140.99.1.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.77, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLKHgytc6TL9XavPmMQ7QAAAAA"]
[Sun Nov 23 16:47:26.320174 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.77:56163] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLKHgytc6TL9XavPmMQ9AAAAAU"]
[Sun Nov 23 16:47:28.212840 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.11:45313] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Nov 23 16:47:29.200434 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.11:45313] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Nov 23 16:47:29.334987 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.11:45313] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLKIQdvEgJm2n2cDmo_PwAAAEI"]
[Sun Nov 23 16:47:29.701564 2025] [:error] [pid 17534:tid 17550] [client 140.99.1.10:59787] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Nov 23 16:47:30.039104 2025] [:error] [pid 17534:tid 17546] [client 140.99.1.10:59787] [client 140.99.1.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.10, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLKInPX9nXBrhgM8sw2vQAAAco"]
[Sun Nov 23 16:47:30.326688 2025] [:error] [pid 17534:tid 17559] [client 140.99.1.10:59787] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Nov 23 16:47:43.625455 2025] [:error] [pid 17534:tid 17559] [client 140.99.1.10:59787] [client 140.99.1.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-setup.php"] [unique_id "aSLKL3PX9nXBrhgM8sw4WAAAAdc"]
[Sun Nov 23 16:53:08.142110 2025] [:error] [pid 38738:tid 38752] [client 172.161.94.9:12679] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Sun Nov 23 16:53:09.045668 2025] [:error] [pid 38738:tid 38743] [client 172.161.94.9:12679] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 23 16:53:09.287193 2025] [:error] [pid 38738:tid 38746] [client 172.161.94.9:12679] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Sun Nov 23 16:53:10.171167 2025] [:error] [pid 38738:tid 38748] [client 172.161.94.9:12679] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Sun Nov 23 16:53:10.443521 2025] [:error] [pid 38738:tid 38756] [client 172.161.94.9:12679] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Sun Nov 23 16:53:10.684710 2025] [:error] [pid 38738:tid 38753] [client 172.161.94.9:12679] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Nov 23 16:53:10.922565 2025] [:error] [pid 38738:tid 38761] [client 172.161.94.9:12679] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSLLdgytc6TL9XavPmMeGAAAABM"]
[Sun Nov 23 16:53:13.073782 2025] [:error] [pid 44652:tid 44715] [client 172.161.94.9:43357] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Sun Nov 23 16:53:13.552481 2025] [:error] [pid 44652:tid 44725] [client 172.161.94.9:43357] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/g.php"] [unique_id "aSLLediQFwsyXQDhwyDSpAAAARM"]
[Sun Nov 23 16:53:14.800358 2025] [:error] [pid 16066:tid 16087] [client 172.161.94.9:43359] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/g.php"] [unique_id "aSLLevq-c47Q5mW5E9GN5AAAAZI"]
[Sun Nov 23 16:53:16.588779 2025] [:error] [pid 16066:tid 16069] [client 172.161.94.9:32399] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/g.php"] [unique_id "aSLLfPq-c47Q5mW5E9GN7AAAAYA"]
[Sun Nov 23 16:53:18.326477 2025] [:error] [pid 44652:tid 44714] [client 172.161.94.9:32447] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/g.php"] [unique_id "aSLLftiQFwsyXQDhwyDSvwAAAQg"]
[Sun Nov 23 16:53:20.908615 2025] [:error] [pid 38740:tid 38799] [client 172.161.94.9:32406] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/13.php"] [unique_id "aSLLgA13QPZSi6O8umW7mAAAAIM"]
[Sun Nov 23 16:53:22.293687 2025] [:error] [pid 38739:tid 38791] [client 172.161.94.9:12722] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/13.php"] [unique_id "aSLLggdvEgJm2n2cDmpJrwAAAFY"]
[Sun Nov 23 16:53:24.482359 2025] [:error] [pid 14602:tid 14630] [client 172.161.94.9:32386] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/13.php"] [unique_id "aSLLhB-I77jdD81pU-m8hwAAAUk"]
[Sun Nov 23 16:53:26.548861 2025] [:error] [pid 17534:tid 17548] [client 172.161.94.9:12303] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/13.php"] [unique_id "aSLLhnPX9nXBrhgM8sxJRQAAAcw"]
[Sun Nov 23 16:53:28.298770 2025] [:error] [pid 16066:tid 16081] [client 172.161.94.9:43361] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLLiPq-c47Q5mW5E9GOHQAAAYw"]
[Sun Nov 23 16:53:31.082383 2025] [:error] [pid 44652:tid 44725] [client 172.161.94.9:42739] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLLi9iQFwsyXQDhwyDS7wAAARM"]
[Sun Nov 23 16:53:32.490454 2025] [:error] [pid 44652:tid 44730] [client 172.161.94.9:13051] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLLjNiQFwsyXQDhwyDS9QAAARg"]
[Sun Nov 23 16:53:34.299646 2025] [:error] [pid 38740:tid 38817] [client 172.161.94.9:42748] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLLjg13QPZSi6O8umW8AwAAAJU"]
[Sun Nov 23 16:53:35.428393 2025] [:error] [pid 38739:tid 38776] [client 172.161.94.9:58097] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/adminer.php"] [unique_id "aSLLjwdvEgJm2n2cDmpJ5AAAAEc"]
[Sun Nov 23 16:53:36.917361 2025] [:error] [pid 17534:tid 17537] [client 172.161.94.9:12719] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/adminer.php"] [unique_id "aSLLkHPX9nXBrhgM8sxJYwAAAcE"]
[Sun Nov 23 16:53:39.582778 2025] [:error] [pid 14602:tid 14625] [client 172.161.94.9:13023] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/adminer.php"] [unique_id "aSLLkx-I77jdD81pU-m8sgAAAUQ"]
[Sun Nov 23 16:53:41.479422 2025] [:error] [pid 17534:tid 17546] [client 172.161.94.9:58072] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/adminer.php"] [unique_id "aSLLlXPX9nXBrhgM8sxJfwAAAco"]
[Sun Nov 23 16:53:43.637565 2025] [:error] [pid 38739:tid 38778] [client 172.161.94.9:42709] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSLLlwdvEgJm2n2cDmpKAwAAAEk"]
[Sun Nov 23 16:53:47.192841 2025] [:error] [pid 17534:tid 17543] [client 172.161.94.9:12291] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSLLm3PX9nXBrhgM8sxJkQAAAcc"]
[Sun Nov 23 16:53:49.515336 2025] [:error] [pid 16066:tid 16088] [client 172.161.94.9:58081] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSLLnfq-c47Q5mW5E9GObwAAAZM"]
[Sun Nov 23 16:53:52.492959 2025] [:error] [pid 14602:tid 14625] [client 172.161.94.9:13046] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSLLoB-I77jdD81pU-m81wAAAUQ"]
[Sun Nov 23 16:53:54.307395 2025] [:error] [pid 14602:tid 14623] [client 172.161.94.9:42692] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSLLoh-I77jdD81pU-m85AAAAUI"]
[Sun Nov 23 16:53:56.452602 2025] [:error] [pid 44652:tid 44728] [client 172.161.94.9:13031] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSLLpNiQFwsyXQDhwyDTSAAAARY"]
[Sun Nov 23 16:54:01.687414 2025] [:error] [pid 17534:tid 17539] [client 172.161.94.9:12617] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSLLqXPX9nXBrhgM8sxJ2wAAAcM"]
[Sun Nov 23 16:54:07.222668 2025] [:error] [pid 16066:tid 16071] [client 172.161.94.9:12610] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSLLr_q-c47Q5mW5E9GOowAAAYI"]
[Sun Nov 23 16:54:08.594311 2025] [:error] [pid 38739:tid 38778] [client 172.161.94.9:58086] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSLLsAdvEgJm2n2cDmpKQwAAAEk"]
[Sun Nov 23 16:54:14.017346 2025] [:error] [pid 38824:tid 38829] [client 172.161.94.9:12624] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSLLtk8WZjXLvbHTHPfT2AAAAMI"]
[Sun Nov 23 16:54:23.942223 2025] [:error] [pid 38738:tid 38760] [client 172.161.94.9:42736] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSLLvwytc6TL9XavPmMfOgAAABI"]
[Sun Nov 23 16:54:32.889530 2025] [:error] [pid 17534:tid 17554] [client 172.161.94.9:58083] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Sun Nov 23 16:54:33.130568 2025] [:error] [pid 17534:tid 17547] [client 172.161.94.9:58083] File does not exist: /usr/local/apache/htdocs/suspended-page/i1.php
[Sun Nov 23 16:54:33.383941 2025] [:error] [pid 17534:tid 17540] [client 172.161.94.9:58083] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sun Nov 23 16:54:34.134134 2025] [:error] [pid 17534:tid 17560] [client 172.161.94.9:58083] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Nov 23 16:54:34.393540 2025] [:error] [pid 17534:tid 17551] [client 172.161.94.9:58083] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Sun Nov 23 16:54:35.015783 2025] [:error] [pid 17534:tid 17546] [client 172.161.94.9:58083] File does not exist: /usr/local/apache/htdocs/suspended-page/17.php
[Sun Nov 23 16:54:35.290742 2025] [:error] [pid 17534:tid 17548] [client 172.161.94.9:58083] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Sun Nov 23 16:54:35.549566 2025] [:error] [pid 17534:tid 17559] [client 172.161.94.9:58083] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSLLy3PX9nXBrhgM8sxKawAAAdc"]
[Sun Nov 23 16:54:39.328709 2025] [:error] [pid 16066:tid 16086] [client 172.161.94.9:58095] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSLLz_q-c47Q5mW5E9GPCAAAAZE"]
[Sun Nov 23 16:54:44.360495 2025] [:error] [pid 38739:tid 38793] [client 172.161.94.9:13007] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSLL1AdvEgJm2n2cDmpKrwAAAFg"]
[Sun Nov 23 16:54:48.531454 2025] [:error] [pid 16066:tid 16080] [client 172.161.94.9:12612] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSLL2Pq-c47Q5mW5E9GPMwAAAYs"]
[Sun Nov 23 16:54:51.185151 2025] [:error] [pid 38738:tid 38753] [client 172.161.94.9:42743] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-configs.php"] [unique_id "aSLL2wytc6TL9XavPmMfkQAAAAs"]
[Sun Nov 23 16:54:53.018344 2025] [:error] [pid 38739:tid 38793] [client 172.161.94.9:58053] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-configs.php"] [unique_id "aSLL3QdvEgJm2n2cDmpKyQAAAFg"]
[Sun Nov 23 16:54:54.936357 2025] [:error] [pid 16066:tid 16079] [client 172.161.94.9:12994] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-configs.php"] [unique_id "aSLL3vq-c47Q5mW5E9GPTAAAAYo"]
[Sun Nov 23 16:54:59.600755 2025] [:error] [pid 44652:tid 44729] [client 172.161.94.9:58075] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-configs.php"] [unique_id "aSLL49iQFwsyXQDhwyDUcwAAARc"]
[Sun Nov 23 16:55:02.578446 2025] [:error] [pid 38738:tid 38748] [client 172.161.94.9:43345] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSLL5gytc6TL9XavPmMfrwAAAAY"]
[Sun Nov 23 16:55:04.022437 2025] [:error] [pid 17534:tid 17542] [client 172.161.94.9:58050] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/click.php"] [unique_id "aSLL6HPX9nXBrhgM8sxK4QAAAcY"]
[Sun Nov 23 16:55:10.556489 2025] [:error] [pid 38739:tid 38772] [client 172.161.94.9:12647] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/click.php"] [unique_id "aSLL7gdvEgJm2n2cDmpLBwAAAEM"]
[Sun Nov 23 16:55:12.538140 2025] [:error] [pid 38824:tid 38833] [client 172.161.94.9:42703] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/click.php"] [unique_id "aSLL8E8WZjXLvbHTHPfU8wAAAMY"]
[Sun Nov 23 16:55:14.559637 2025] [:error] [pid 16066:tid 16075] [client 172.161.94.9:12664] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/click.php"] [unique_id "aSLL8vq-c47Q5mW5E9GP_AAAAYY"]
[Sun Nov 23 16:55:16.420869 2025] [:error] [pid 44652:tid 44712] [client 172.161.94.9:42696] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/install.php"] [unique_id "aSLL9NiQFwsyXQDhwyDU8QAAAQY"]
[Sun Nov 23 16:55:17.475343 2025] [:error] [pid 17534:tid 17556] [client 172.161.94.9:58100] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/install.php"] [unique_id "aSLL9XPX9nXBrhgM8sxLHgAAAdQ"]
[Sun Nov 23 16:55:18.485378 2025] [:error] [pid 38738:tid 38752] [client 172.161.94.9:58076] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/install.php"] [unique_id "aSLL9gytc6TL9XavPmMf4wAAAAo"]
[Sun Nov 23 16:55:20.615239 2025] [:error] [pid 14602:tid 14642] [client 172.161.94.9:58052] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/install.php"] [unique_id "aSLL-B-I77jdD81pU-m95QAAAVU"]
[Sun Nov 23 16:55:22.928652 2025] [:error] [pid 38740:tid 38811] [client 172.161.94.9:12619] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/10.php"] [unique_id "aSLL-g13QPZSi6O8umW99QAAAI8"]
[Sun Nov 23 16:55:25.003097 2025] [:error] [pid 14602:tid 14622] [client 172.161.94.9:12633] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/10.php"] [unique_id "aSLL_R-I77jdD81pU-m9-QAAAUE"]
[Sun Nov 23 16:55:28.828098 2025] [:error] [pid 44652:tid 44727] [client 172.161.94.9:12626] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/10.php"] [unique_id "aSLMANiQFwsyXQDhwyDVFQAAARU"]
[Sun Nov 23 16:55:31.507887 2025] [:error] [pid 38740:tid 38801] [client 172.161.94.9:13025] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/10.php"] [unique_id "aSLMAw13QPZSi6O8umW-JAAAAIU"]
[Sun Nov 23 16:55:34.315316 2025] [:error] [pid 44652:tid 44720] [client 172.161.94.9:12661] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/goat1.php"] [unique_id "aSLMBtiQFwsyXQDhwyDVHQAAAQ4"]
[Sun Nov 23 16:55:38.175259 2025] [:error] [pid 44652:tid 44726] [client 172.161.94.9:12665] File does not exist: /usr/local/apache/htdocs/suspended-page/goat1.php
[Sun Nov 23 16:55:38.419311 2025] [:error] [pid 44652:tid 44715] [client 172.161.94.9:12665] File does not exist: /usr/local/apache/htdocs/suspended-page/yu.php
[Sun Nov 23 16:55:39.638712 2025] [:error] [pid 44652:tid 44706] [client 172.161.94.9:12665] File does not exist: /usr/local/apache/htdocs/suspended-page/124.php
[Sun Nov 23 16:55:40.126498 2025] [:error] [pid 44652:tid 44707] [client 172.161.94.9:12665] File does not exist: /usr/local/apache/htdocs/suspended-page/q.php
[Sun Nov 23 16:55:40.412722 2025] [:error] [pid 44652:tid 44727] [client 172.161.94.9:12665] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Sun Nov 23 16:55:40.901794 2025] [:error] [pid 44652:tid 44712] [client 172.161.94.9:12665] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Nov 23 16:55:41.437004 2025] [:error] [pid 44652:tid 44719] [client 172.161.94.9:12665] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/3.php"] [unique_id "aSLMDdiQFwsyXQDhwyDVhAAAAQ0"]
[Sun Nov 23 16:55:43.394591 2025] [:error] [pid 38824:tid 38827] [client 172.161.94.9:58098] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/3.php"] [unique_id "aSLMD08WZjXLvbHTHPfVvQAAAMA"]
[Sun Nov 23 16:55:46.727137 2025] [:error] [pid 14602:tid 14644] [client 172.161.94.9:13038] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/3.php"] [unique_id "aSLMEh-I77jdD81pU-m-dQAAAVc"]
[Sun Nov 23 16:55:48.429494 2025] [:error] [pid 17534:tid 17544] [client 172.161.94.9:52109] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/3.php"] [unique_id "aSLMFHPX9nXBrhgM8sxLkwAAAcg"]
[Sun Nov 23 16:55:52.596431 2025] [:error] [pid 17534:tid 17556] [client 172.161.94.9:12657] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSLMGHPX9nXBrhgM8sxLsgAAAdQ"]
[Sun Nov 23 16:55:54.894315 2025] [:error] [pid 38824:tid 38851] [client 172.161.94.9:52149] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSLMGk8WZjXLvbHTHPfV5QAAANg"]
[Sun Nov 23 16:55:57.935381 2025] [:error] [pid 14602:tid 14624] [client 172.161.94.9:12620] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSLMHR-I77jdD81pU-m-pQAAAUM"]
[Sun Nov 23 16:56:00.161437 2025] [:error] [pid 16066:tid 16091] [client 172.161.94.9:12458] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSLMIPq-c47Q5mW5E9GQvgAAAZY"]
[Sun Nov 23 16:56:00.981386 2025] [:error] [pid 44652:tid 44721] [client 172.161.94.9:42718] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/sk.php"] [unique_id "aSLMINiQFwsyXQDhwyDV6AAAAQ8"]
[Sun Nov 23 16:56:01.969576 2025] [:error] [pid 44652:tid 44719] [client 172.161.94.9:12472] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/sk.php"] [unique_id "aSLMIdiQFwsyXQDhwyDV7QAAAQ0"]
[Sun Nov 23 16:56:03.633000 2025] [:error] [pid 44652:tid 44712] [client 172.161.94.9:12457] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/sk.php"] [unique_id "aSLMI9iQFwsyXQDhwyDV7wAAAQY"]
[Sun Nov 23 16:56:05.443748 2025] [:error] [pid 38738:tid 38742] [client 172.161.94.9:52104] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/sk.php"] [unique_id "aSLMJQytc6TL9XavPmMgdgAAAAA"]
[Sun Nov 23 16:56:06.876601 2025] [:error] [pid 38738:tid 38757] [client 172.161.94.9:52136] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-crom.php"] [unique_id "aSLMJgytc6TL9XavPmMgfwAAAA8"]
[Sun Nov 23 16:56:08.124593 2025] [:error] [pid 38740:tid 38808] [client 172.161.94.9:12477] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-crom.php"] [unique_id "aSLMKA13QPZSi6O8umW-4AAAAIw"]
[Sun Nov 23 16:56:09.643380 2025] [:error] [pid 17534:tid 17538] [client 172.161.94.9:12418] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-crom.php"] [unique_id "aSLMKXPX9nXBrhgM8sxMFwAAAcI"]
[Sun Nov 23 16:56:19.179137 2025] [:error] [pid 38738:tid 38743] [client 172.161.94.9:40844] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-crom.php"] [unique_id "aSLMMwytc6TL9XavPmMgmgAAAAE"]
[Sun Nov 23 16:56:22.418641 2025] [:error] [pid 38738:tid 38763] [client 172.161.94.9:12469] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/max.php"] [unique_id "aSLMNgytc6TL9XavPmMgnwAAABU"]
[Sun Nov 23 16:56:24.731950 2025] [:error] [pid 38740:tid 38812] [client 172.161.94.9:48478] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/max.php"] [unique_id "aSLMOA13QPZSi6O8umW_NgAAAJA"]
[Sun Nov 23 16:56:27.128443 2025] [:error] [pid 44652:tid 44721] [client 172.161.94.9:58636] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/max.php"] [unique_id "aSLMO9iQFwsyXQDhwyDWQwAAAQ8"]
[Sun Nov 23 16:56:28.820419 2025] [:error] [pid 44652:tid 44726] [client 172.161.94.9:58663] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/max.php"] [unique_id "aSLMPNiQFwsyXQDhwyDWRgAAARQ"]
[Sun Nov 23 16:56:29.961423 2025] [:error] [pid 38739:tid 38777] [client 172.161.94.9:58643] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSLMPQdvEgJm2n2cDmpMowAAAEg"]
[Sun Nov 23 16:56:31.405453 2025] [:error] [pid 14602:tid 14632] [client 172.161.94.9:12838] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSLMPx-I77jdD81pU-m_DAAAAUs"]
[Sun Nov 23 16:56:33.964434 2025] [:error] [pid 38739:tid 38789] [client 172.161.94.9:58685] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSLMQQdvEgJm2n2cDmpMvQAAAFQ"]
[Sun Nov 23 16:56:36.402645 2025] [:error] [pid 44652:tid 44718] [client 172.161.94.9:12833] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSLMRNiQFwsyXQDhwyDWXwAAAQw"]
[Sun Nov 23 16:56:40.206392 2025] [:error] [pid 38738:tid 38762] [client 172.161.94.9:58686] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/1100.php"] [unique_id "aSLMSAytc6TL9XavPmMgxQAAABQ"]
[Sun Nov 23 16:56:49.804141 2025] [:error] [pid 38740:tid 38802] [client 172.161.94.9:52308] File does not exist: /usr/local/apache/htdocs/suspended-page/1100.php
[Sun Nov 23 16:56:50.537960 2025] [:error] [pid 38740:tid 38810] [client 172.161.94.9:52308] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Nov 23 16:56:50.781952 2025] [:error] [pid 38740:tid 38807] [client 172.161.94.9:52308] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sun Nov 23 16:56:53.038678 2025] [:error] [pid 38740:tid 38801] [client 172.161.94.9:52308] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Sun Nov 23 16:56:53.301071 2025] [:error] [pid 38740:tid 38811] [client 172.161.94.9:52308] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Nov 23 16:56:53.542504 2025] [:error] [pid 38740:tid 38798] [client 172.161.94.9:52308] File does not exist: /usr/local/apache/htdocs/suspended-page/oo.php
[Sun Nov 23 16:56:53.810392 2025] [:error] [pid 38740:tid 38805] [client 172.161.94.9:52308] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Sun Nov 23 16:56:54.495419 2025] [:error] [pid 38740:tid 38809] [client 172.161.94.9:52308] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSLMVg13QPZSi6O8umW_qwAAAI0"]
[Sun Nov 23 16:56:58.043490 2025] [:error] [pid 16066:tid 16087] [client 172.161.94.9:42883] File does not exist: /usr/local/apache/htdocs/suspended-page/ll.php
[Sun Nov 23 16:56:58.296338 2025] [:error] [pid 16066:tid 16085] [client 172.161.94.9:42883] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSLMWvq-c47Q5mW5E9GRegAAAZA"]
[Sun Nov 23 16:57:01.283444 2025] [:error] [pid 44652:tid 44720] [client 172.161.94.9:47613] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ee.php"] [unique_id "aSLMXdiQFwsyXQDhwyDWyAAAAQ4"]
[Sun Nov 23 16:57:02.450509 2025] [:error] [pid 17534:tid 17539] [client 172.161.94.9:47595] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ee.php"] [unique_id "aSLMXnPX9nXBrhgM8sxM8AAAAcM"]
[Sun Nov 23 16:57:07.538438 2025] [:error] [pid 38738:tid 38766] [client 172.161.94.9:47562] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ee.php"] [unique_id "aSLMYwytc6TL9XavPmMhHwAAABg"]
[Sun Nov 23 16:57:11.687612 2025] [:error] [pid 17534:tid 17541] [client 172.161.94.9:52312] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ee.php"] [unique_id "aSLMZ3PX9nXBrhgM8sxNHQAAAcU"]
[Sun Nov 23 16:57:13.212489 2025] [:error] [pid 16066:tid 16090] [client 172.161.94.9:47565] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/product.php"] [unique_id "aSLMafq-c47Q5mW5E9GRrgAAAZU"]
[Sun Nov 23 16:57:14.797202 2025] [:error] [pid 44652:tid 44714] [client 172.161.94.9:33631] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/product.php"] [unique_id "aSLMatiQFwsyXQDhwyDXGQAAAQg"]
[Sun Nov 23 16:57:17.727530 2025] [:error] [pid 38738:tid 38762] [client 172.161.94.9:33639] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/product.php"] [unique_id "aSLMbQytc6TL9XavPmMhNQAAABQ"]
[Sun Nov 23 16:57:20.394489 2025] [:error] [pid 38739:tid 38770] [client 172.161.94.9:33634] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/product.php"] [unique_id "aSLMcAdvEgJm2n2cDmpNXQAAAEE"]
[Sun Nov 23 16:57:24.807565 2025] [:error] [pid 38740:tid 38813] [client 172.161.94.9:52319] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wi.php"] [unique_id "aSLMdA13QPZSi6O8umW_3AAAAJE"]
[Sun Nov 23 16:57:30.239966 2025] [:error] [pid 38824:tid 38834] [client 172.161.94.9:47608] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wi.php"] [unique_id "aSLMek8WZjXLvbHTHPfW_QAAAMc"]
[Sun Nov 23 16:57:33.879886 2025] [:error] [pid 16066:tid 16080] [client 172.161.94.9:13232] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wi.php"] [unique_id "aSLMffq-c47Q5mW5E9GSAgAAAYs"]
[Sun Nov 23 16:57:39.491364 2025] [:error] [pid 38739:tid 38774] [client 172.161.94.9:47591] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/mms.php"] [unique_id "aSLMgwdvEgJm2n2cDmpNjQAAAEU"]
[Sun Nov 23 16:57:43.473235 2025] [:error] [pid 38738:tid 38748] [client 172.161.94.9:33614] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/mms.php"] [unique_id "aSLMhwytc6TL9XavPmMhaQAAAAY"]
[Sun Nov 23 16:57:45.524506 2025] [:error] [pid 38740:tid 38799] [client 172.161.94.9:40522] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/mms.php"] [unique_id "aSLMiQ13QPZSi6O8umXAJgAAAIM"]
[Sun Nov 23 16:57:50.498741 2025] [:error] [pid 16066:tid 16082] [client 172.161.94.9:40528] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/mms.php"] [unique_id "aSLMjvq-c47Q5mW5E9GSZgAAAY0"]
[Sun Nov 23 16:57:53.590295 2025] [:error] [pid 44652:tid 44720] [client 172.161.94.9:13237] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLMkdiQFwsyXQDhwyDXxgAAAQ4"]
[Sun Nov 23 16:57:56.487481 2025] [:error] [pid 14602:tid 14622] [client 172.161.94.9:13199] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/v4.php"] [unique_id "aSLMlB-I77jdD81pU-nAEwAAAUE"]
[Sun Nov 23 16:57:59.421425 2025] [:error] [pid 38740:tid 38810] [client 172.161.94.9:13239] File does not exist: /usr/local/apache/htdocs/suspended-page/v4.php
[Sun Nov 23 16:57:59.661392 2025] [:error] [pid 38740:tid 38797] [client 172.161.94.9:13239] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php
[Sun Nov 23 16:58:00.938724 2025] [:error] [pid 38740:tid 38797] [client 172.161.94.9:13239] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Nov 23 16:58:01.426935 2025] [:error] [pid 38740:tid 38819] [client 172.161.94.9:13239] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Nov 23 16:58:01.671207 2025] [:error] [pid 38740:tid 38815] [client 172.161.94.9:13239] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSLMmQ13QPZSi6O8umXAiAAAAJM"]
[Sun Nov 23 16:58:09.050091 2025] [:error] [pid 38739:tid 38775] [client 172.161.94.9:48029] File does not exist: /usr/local/apache/htdocs/suspended-page/po.php
[Sun Nov 23 16:58:09.294011 2025] [:error] [pid 38739:tid 38787] [client 172.161.94.9:48029] File does not exist: /usr/local/apache/htdocs/suspended-page/zews.php
[Sun Nov 23 16:58:09.855830 2025] [:error] [pid 38739:tid 38790] [client 172.161.94.9:48029] File does not exist: /usr/local/apache/htdocs/suspended-page/usage-file.php
[Sun Nov 23 16:58:11.619843 2025] [:error] [pid 38739:tid 38790] [client 172.161.94.9:48029] [client 172.161.94.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/assets/js/wp-config.php"] [unique_id "aSLMowdvEgJm2n2cDmpN3gAAAFU"]
[Sun Nov 23 16:58:13.036631 2025] [:error] [pid 14602:tid 14622] [client 172.161.94.9:48005] File does not exist: /usr/local/apache/htdocs/suspended-page/Js.php
[Sun Nov 23 16:58:13.282718 2025] [:error] [pid 14602:tid 14640] [client 172.161.94.9:48005] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sun Nov 23 16:58:13.541608 2025] [:error] [pid 14602:tid 14644] [client 172.161.94.9:48005] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bs1.php"] [unique_id "aSLMpR-I77jdD81pU-nASAAAAVc"]
[Sun Nov 23 16:58:16.520606 2025] [:error] [pid 44652:tid 44708] [client 172.161.94.9:48018] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bs1.php"] [unique_id "aSLMqNiQFwsyXQDhwyDYZQAAAQI"]
[Sun Nov 23 16:58:18.366336 2025] [:error] [pid 17534:tid 17536] [client 172.161.94.9:48010] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bs1.php"] [unique_id "aSLMqnPX9nXBrhgM8sxOCQAAAcA"]
[Sun Nov 23 16:58:23.209420 2025] [:error] [pid 38740:tid 38799] [client 172.161.94.9:48002] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bs1.php"] [unique_id "aSLMrw13QPZSi6O8umXA1QAAAIM"]
[Sun Nov 23 16:58:26.081449 2025] [:error] [pid 38739:tid 38776] [client 172.161.94.9:12604] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/build.php"] [unique_id "aSLMsgdvEgJm2n2cDmpODwAAAEc"]
[Sun Nov 23 16:58:30.134427 2025] [:error] [pid 38740:tid 38802] [client 172.161.94.9:12532] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/build.php"] [unique_id "aSLMtg13QPZSi6O8umXA7AAAAIY"]
[Sun Nov 23 16:58:32.110725 2025] [:error] [pid 16066:tid 16078] [client 172.161.94.9:12599] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/build.php"] [unique_id "aSLMuPq-c47Q5mW5E9GSzAAAAYk"]
[Sun Nov 23 16:58:34.454740 2025] [:error] [pid 16066:tid 16084] [client 172.161.94.9:12499] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/build.php"] [unique_id "aSLMuvq-c47Q5mW5E9GS0AAAAY8"]
[Sun Nov 23 16:58:37.139348 2025] [:error] [pid 17534:tid 17558] [client 172.161.94.9:48001] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ab.php"] [unique_id "aSLMvXPX9nXBrhgM8sxORwAAAdY"]
[Sun Nov 23 16:58:38.925233 2025] [:error] [pid 14602:tid 14642] [client 172.161.94.9:47506] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ab.php"] [unique_id "aSLMvh-I77jdD81pU-nApQAAAVU"]
[Sun Nov 23 16:58:43.316523 2025] [:error] [pid 17534:tid 17536] [client 172.161.94.9:47525] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ab.php"] [unique_id "aSLMw3PX9nXBrhgM8sxOYQAAAcA"]
[Sun Nov 23 16:58:52.218991 2025] [:error] [pid 38824:tid 38831] [client 172.161.94.9:53044] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ahax.php"] [unique_id "aSLMzE8WZjXLvbHTHPfYAAAAAMQ"]
[Sun Nov 23 16:58:58.501458 2025] [:error] [pid 38824:tid 38831] [client 172.161.94.9:53024] [client 172.161.94.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ahax.php"] [unique_id "aSLM0k8WZjXLvbHTHPfYEgAAAMQ"]
[Sun Nov 23 17:47:33.354354 2025] [:error] [pid 17534:tid 17549] [client 13.235.22.177:47296] [client 13.235.22.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.235.22.177, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSLYNXPX9nXBrhgM8sxgVAAAAc0"]
[Sun Nov 23 17:47:33.357909 2025] [:error] [pid 17534:tid 17549] [client 13.235.22.177:47296] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 17:47:33.985331 2025] [:error] [pid 16066:tid 16089] [client 13.235.22.177:47300] [client 13.235.22.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.235.22.177, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSLYNfq-c47Q5mW5E9Gf6QAAAZQ"]
[Sun Nov 23 17:47:33.992172 2025] [:error] [pid 16066:tid 16089] [client 13.235.22.177:47300] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 00:09:34.051024 2025] [:error] [pid 17534:tid 17541] [client 106.200.20.197:18749] [client 106.200.20.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.20.197, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aSMxvnPX9nXBrhgM8syyCgAAAcU"]
[Mon Nov 24 00:09:34.065701 2025] [:error] [pid 17534:tid 17541] [client 106.200.20.197:18749] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Nov 24 01:07:05.803861 2025] [:error] [pid 1589:tid 1614] [client 167.71.203.246:51233] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Mon Nov 24 03:50:10.450054 2025] [:error] [pid 56850:tid 56920] [client 172.70.242.74:9721] [client 172.70.242.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSNlcqzRApTptDSemw9HmwAAAFg"]
[Mon Nov 24 05:03:37.618292 2025] [:error] [pid 12999:tid 13027] [client 85.203.23.182:34571] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/network_xo.php"] [unique_id "aSN2qVtj_teEYJ8vu7EEYgAAANg"]
[Mon Nov 24 05:12:03.055816 2025] [:error] [pid 53508:tid 53513] [client 85.203.23.182:59543] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/1.php"] [unique_id "aSN4o2639qxbKCcL09ytGQAAAQM"]
[Mon Nov 24 05:15:23.293464 2025] [:error] [pid 53508:tid 53533] [client 85.203.23.182:47865] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/class.api.php"] [unique_id "aSN5a2639qxbKCcL09yulwAAARc"]
[Mon Nov 24 05:23:03.656920 2025] [:error] [pid 12912:tid 12978] [client 85.203.23.182:48249] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aSN7N5Mj_Lgt36UonYK5bgAAAIk"]
[Mon Nov 24 05:26:03.896693 2025] [:error] [pid 12910:tid 12922] [client 85.203.23.182:54707] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSN762kWgvzAF2Nei2Vs-AAAAAc"]
[Mon Nov 24 05:28:39.165415 2025] [:error] [pid 12912:tid 12975] [client 85.203.23.182:32753] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/shelp.php"] [unique_id "aSN8h5Mj_Lgt36UonYK6zAAAAIY"]
[Mon Nov 24 05:29:44.390547 2025] [:error] [pid 53508:tid 53524] [client 85.203.23.182:33043] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aSN8yG639qxbKCcL09y0xwAAAQ4"]
[Mon Nov 24 05:31:24.685278 2025] [:error] [pid 12999:tid 13015] [client 85.203.23.182:57185] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSN9LFtj_teEYJ8vu7EOjAAAAMw"]
[Mon Nov 24 05:31:39.879489 2025] [:error] [pid 12999:tid 13006] [client 85.203.23.182:62281] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/ss.php"] [unique_id "aSN9O1tj_teEYJ8vu7EOoQAAAMM"]
[Mon Nov 24 05:35:56.274126 2025] [:error] [pid 53508:tid 53511] [client 85.203.23.182:36049] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/blocks/page-list-item/about.php"] [unique_id "aSN-PG639qxbKCcL09y33gAAAQE"]
[Mon Nov 24 05:40:11.597464 2025] [:error] [pid 53508:tid 53514] [client 85.203.23.182:52029] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/img/single/about.php"] [unique_id "aSN_O2639qxbKCcL09y5iQAAAQQ"]
[Mon Nov 24 05:40:56.831317 2025] [:error] [pid 12910:tid 12923] [client 85.203.23.182:41641] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/network/sss.php"] [unique_id "aSN_aGkWgvzAF2Nei2VwzQAAAAg"]
[Mon Nov 24 05:42:17.196451 2025] [:error] [pid 12911:tid 12957] [client 85.203.23.182:46825] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/network/css.php"] [unique_id "aSN_uUDMbk9464jnIl7psQAAAE8"]
[Mon Nov 24 05:43:17.390926 2025] [:error] [pid 12911:tid 12958] [client 85.203.23.182:21545] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/class-wp-image-editor-gd-pic.php"] [unique_id "aSN_9UDMbk9464jnIl7p1gAAAFA"]
[Mon Nov 24 08:14:33.070562 2025] [:error] [pid 48599:tid 48606] [client 103.65.237.124:57626] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/sftp-config.json"] [unique_id "aSOjaZzvu6PDJiRKE3KoFQAAAYM"]
[Mon Nov 24 10:36:13.819992 2025] [:error] [pid 9630:tid 9651] [client 213.21.239.4:49470] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce/.git/config;"] [unique_id "aSPEnSrSgUgPGkizt2qGHwAAAFM"]
[Mon Nov 24 10:36:13.821052 2025] [:error] [pid 16441:tid 16456] [client 213.21.239.4:49662] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/common/.git/config"] [unique_id "aSPEnYq_bc5MOa9HflmoBAAAAIw"]
[Mon Nov 24 10:36:13.821940 2025] [:error] [pid 16549:tid 16552] [client 213.21.239.4:49666] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/application/.git/config"] [unique_id "aSPEnaeWW19A99PUw_f_7gAAAUA"]
[Mon Nov 24 10:36:13.822928 2025] [:error] [pid 16441:tid 16458] [client 213.21.239.4:49486] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce/.git/%0Aconfig"] [unique_id "aSPEnYq_bc5MOa9HflmoBQAAAI4"]
[Mon Nov 24 10:36:13.823441 2025] [:error] [pid 16441:tid 16444] [client 213.21.239.4:49516] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/database/.git/config"] [unique_id "aSPEnYq_bc5MOa9HflmoBgAAAIA"]
[Mon Nov 24 10:36:13.826304 2025] [:error] [pid 16441:tid 16450] [client 213.21.239.4:49500] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce/..;/.git/config"] [unique_id "aSPEnYq_bc5MOa9HflmoCAAAAIY"]
[Mon Nov 24 10:36:13.826818 2025] [:error] [pid 16441:tid 16465] [client 213.21.239.4:49468] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce../.git/config"] [unique_id "aSPEnYq_bc5MOa9HflmoBwAAAJU"]
[Mon Nov 24 10:36:13.827315 2025] [:error] [pid 9630:tid 9649] [client 213.21.239.4:49506] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce/.git/config"] [unique_id "aSPEnSrSgUgPGkizt2qGIAAAAFE"]
[Mon Nov 24 10:36:13.832248 2025] [:error] [pid 48600:tid 48648] [client 213.21.239.4:49648] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/admin/.git/config"] [unique_id "aSPEnftOzSUAQvWVjBdEkgAAAdI"]
[Mon Nov 24 10:36:13.832690 2025] [:error] [pid 48688:tid 48694] [client 213.21.239.4:49670] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce/static../.git/config"] [unique_id "aSPEnRm2q1FkzLam7A1ZBwAAAkI"]
[Mon Nov 24 10:36:13.833102 2025] [:error] [pid 16593:tid 16604] [client 213.21.239.4:49504] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce/.git/config;.."] [unique_id "aSPEnRVGznHBJI2LKpQD-wAAAok"]
[Mon Nov 24 10:36:13.833261 2025] [:error] [pid 16549:tid 16566] [client 213.21.239.4:49684] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/backup/.git/config"] [unique_id "aSPEnaeWW19A99PUw_f_7wAAAU4"]
[Mon Nov 24 10:36:13.836030 2025] [:error] [pid 16593:tid 16610] [client 213.21.239.4:49604] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/app/.git/config"] [unique_id "aSPEnRVGznHBJI2LKpQD_AAAAo8"]
[Mon Nov 24 10:36:13.836411 2025] [:error] [pid 16549:tid 16577] [client 213.21.239.4:49576] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/api/.git/config"] [unique_id "aSPEnaeWW19A99PUw_f_8AAAAVg"]
[Mon Nov 24 10:36:13.841092 2025] [:error] [pid 48600:tid 48630] [client 213.21.239.4:49612] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/css../.git/config"] [unique_id "aSPEnftOzSUAQvWVjBdElAAAAcA"]
[Mon Nov 24 10:36:13.841978 2025] [:error] [pid 48600:tid 48634] [client 213.21.239.4:49534] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/dev/.git/config"] [unique_id "aSPEnftOzSUAQvWVjBdElQAAAcQ"]
[Mon Nov 24 10:36:13.844137 2025] [:error] [pid 48600:tid 48638] [client 213.21.239.4:49570] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/developer/.git/config"] [unique_id "aSPEnftOzSUAQvWVjBdElgAAAcg"]
[Mon Nov 24 10:36:13.846325 2025] [:error] [pid 16593:tid 16608] [client 213.21.239.4:49672] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/assets../.git/config"] [unique_id "aSPEnRVGznHBJI2LKpQD_gAAAo0"]
[Mon Nov 24 10:36:13.846902 2025] [:error] [pid 48600:tid 48639] [client 213.21.239.4:49588] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce/;/.git/config"] [unique_id "aSPEnftOzSUAQvWVjBdElwAAAck"]
[Mon Nov 24 10:36:13.848541 2025] [:error] [pid 16549:tid 16572] [client 213.21.239.4:49676] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/content../.git/config"] [unique_id "aSPEnaeWW19A99PUw_f_8gAAAVM"]
[Mon Nov 24 10:36:17.033478 2025] [:error] [pid 16549:tid 16566] [client 213.21.239.4:49692] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git/%0Aconfig"] [unique_id "aSPEoaeWW19A99PUw_cAAAAAAU4"]
[Mon Nov 24 10:36:17.034730 2025] [:error] [pid 48688:tid 48692] [client 213.21.239.4:49706] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/lib../.git/config"] [unique_id "aSPEoRm2q1FkzLam7A1ZCwAAAkA"]
[Mon Nov 24 10:36:17.035927 2025] [:error] [pid 48601:tid 48663] [client 213.21.239.4:49734] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/message-api/.git/config"] [unique_id "aSPEoYMM4MaVTk74-AZlLQAAAgY"]
[Mon Nov 24 10:36:17.038633 2025] [:error] [pid 16441:tid 16464] [client 213.21.239.4:49728] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSPEoYq_bc5MOa9HflmoCwAAAJQ"]
[Mon Nov 24 10:36:17.038822 2025] [:error] [pid 48688:tid 48716] [client 213.21.239.4:49748] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config;"] [unique_id "aSPEoRm2q1FkzLam7A1ZDAAAAlg"]
[Mon Nov 24 10:36:17.044088 2025] [:error] [pid 16441:tid 16448] [client 213.21.239.4:49832] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/git/.git/config"] [unique_id "aSPEoYq_bc5MOa9HflmoDAAAAIQ"]
[Mon Nov 24 10:36:17.044742 2025] [:error] [pid 48688:tid 48715] [client 213.21.239.4:49766] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au../.git/config"] [unique_id "aSPEoRm2q1FkzLam7A1ZDgAAAlc"]
[Mon Nov 24 10:36:17.046236 2025] [:error] [pid 16516:tid 16536] [client 213.21.239.4:49820] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/;/.git/config"] [unique_id "aSPEofqZbniwaNwL8XmvSwAAARE"]
[Mon Nov 24 10:36:17.049627 2025] [:error] [pid 16593:tid 16596] [client 213.21.239.4:49712] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/live/.git/config"] [unique_id "aSPEoRVGznHBJI2LKpQEAQAAAoE"]
[Mon Nov 24 10:36:17.052525 2025] [:error] [pid 48599:tid 48607] [client 213.21.239.4:49934] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/images../.git/config"] [unique_id "aSPEoZzvu6PDJiRKE3LjbgAAAYQ"]
[Mon Nov 24 10:36:17.052899 2025] [:error] [pid 48599:tid 48610] [client 213.21.239.4:49908] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git/config;.."] [unique_id "aSPEoZzvu6PDJiRKE3LjbwAAAYc"]
[Mon Nov 24 10:36:17.053118 2025] [:error] [pid 48599:tid 48612] [client 213.21.239.4:49916] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/img../.git/config"] [unique_id "aSPEoZzvu6PDJiRKE3LjcAAAAYk"]
[Mon Nov 24 10:36:17.053739 2025] [:error] [pid 48599:tid 48615] [client 213.21.239.4:49926] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/js../.git/config"] [unique_id "aSPEoZzvu6PDJiRKE3LjcQAAAYw"]
[Mon Nov 24 10:36:17.054263 2025] [:error] [pid 48599:tid 48613] [client 213.21.239.4:49828] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/;/.git/config"] [unique_id "aSPEoZzvu6PDJiRKE3LjcgAAAYo"]
[Mon Nov 24 10:36:17.055988 2025] [:error] [pid 48688:tid 48708] [client 213.21.239.4:49754] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config;.."] [unique_id "aSPEoRm2q1FkzLam7A1ZDwAAAlA"]
[Mon Nov 24 10:36:17.080027 2025] [:error] [pid 16441:tid 16466] [client 213.21.239.4:49842] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git/config"] [unique_id "aSPEoYq_bc5MOa9HflmoDQAAAJY"]
[Mon Nov 24 10:36:17.080736 2025] [:error] [pid 48688:tid 48705] [client 213.21.239.4:49894] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/..;/.git/config"] [unique_id "aSPEoRm2q1FkzLam7A1ZEAAAAk0"]
[Mon Nov 24 10:36:17.081058 2025] [:error] [pid 16441:tid 16461] [client 213.21.239.4:49884] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git/config;"] [unique_id "aSPEoYq_bc5MOa9HflmoDgAAAJE"]
[Mon Nov 24 10:36:17.082102 2025] [:error] [pid 16441:tid 16467] [client 213.21.239.4:49870] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSPEoYq_bc5MOa9HflmoDwAAAJc"]
[Mon Nov 24 10:36:17.084078 2025] [:error] [pid 48688:tid 48698] [client 213.21.239.4:49854] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/static../.git/config"] [unique_id "aSPEoRm2q1FkzLam7A1ZEQAAAkY"]
[Mon Nov 24 10:36:17.085810 2025] [:error] [pid 48600:tid 48647] [client 213.21.239.4:49814] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/..;/.git/config"] [unique_id "aSPEoftOzSUAQvWVjBdEmQAAAdE"]
[Mon Nov 24 10:36:17.086989 2025] [:error] [pid 48600:tid 48633] [client 213.21.239.4:49788] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/m/.git/config"] [unique_id "aSPEoftOzSUAQvWVjBdEmgAAAcM"]
[Mon Nov 24 10:36:20.039867 2025] [:error] [pid 9630:tid 9652] [client 213.21.239.4:50178] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/public/.git/config"] [unique_id "aSPEpCrSgUgPGkizt2qGOwAAAFQ"]
[Mon Nov 24 10:36:20.041025 2025] [:error] [pid 48601:tid 48669] [client 213.21.239.4:50184] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/prod/.git/config"] [unique_id "aSPEpIMM4MaVTk74-AZlLwAAAgw"]
[Mon Nov 24 10:36:20.041149 2025] [:error] [pid 16593:tid 16598] [client 213.21.239.4:50192] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git/%0Aconfig"] [unique_id "aSPEpBVGznHBJI2LKpQEBAAAAoM"]
[Mon Nov 24 10:36:20.041830 2025] [:error] [pid 16441:tid 16464] [client 213.21.239.4:50198] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/qa/.git/config"] [unique_id "aSPEpIq_bc5MOa9HflmoGAAAAJQ"]
[Mon Nov 24 10:36:20.044535 2025] [:error] [pid 16441:tid 16448] [client 213.21.239.4:50206] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config;"] [unique_id "aSPEpIq_bc5MOa9HflmoGQAAAIQ"]
[Mon Nov 24 10:36:20.046446 2025] [:error] [pid 16593:tid 16604] [client 213.21.239.4:50218] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/config"] [unique_id "aSPEpBVGznHBJI2LKpQEBQAAAok"]
[Mon Nov 24 10:36:20.047938 2025] [:error] [pid 16441:tid 16461] [client 213.21.239.4:50240] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/..;/.git/config"] [unique_id "aSPEpIq_bc5MOa9HflmoGgAAAJE"]
[Mon Nov 24 10:36:20.049136 2025] [:error] [pid 16441:tid 16466] [client 213.21.239.4:50234] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au../.git/config"] [unique_id "aSPEpIq_bc5MOa9HflmoGwAAAJY"]
[Mon Nov 24 10:36:20.051357 2025] [:error] [pid 16593:tid 16610] [client 213.21.239.4:50246] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/../.git/config"] [unique_id "aSPEpBVGznHBJI2LKpQEBgAAAo8"]
[Mon Nov 24 10:36:20.052754 2025] [:error] [pid 16593:tid 16607] [client 213.21.239.4:50252] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git/config"] [unique_id "aSPEpBVGznHBJI2LKpQEBwAAAow"]
[Mon Nov 24 10:36:20.053022 2025] [:error] [pid 16441:tid 16467] [client 213.21.239.4:50264] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config;.."] [unique_id "aSPEpIq_bc5MOa9HflmoHAAAAJc"]
[Mon Nov 24 10:36:20.053324 2025] [:error] [pid 16441:tid 16452] [client 213.21.239.4:50274] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git/config;"] [unique_id "aSPEpIq_bc5MOa9HflmoHQAAAIg"]
[Mon Nov 24 10:36:20.056228 2025] [:error] [pid 16441:tid 16456] [client 213.21.239.4:50296] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git/config;.."] [unique_id "aSPEpIq_bc5MOa9HflmoHgAAAIw"]
[Mon Nov 24 10:36:20.057836 2025] [:error] [pid 48601:tid 48660] [client 213.21.239.4:50280] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/..;/.git/config"] [unique_id "aSPEpIMM4MaVTk74-AZlMAAAAgM"]
[Mon Nov 24 10:36:20.060182 2025] [:error] [pid 16441:tid 16458] [client 213.21.239.4:50320] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/;/.git/config"] [unique_id "aSPEpIq_bc5MOa9HflmoHwAAAI4"]
[Mon Nov 24 10:36:20.060853 2025] [:error] [pid 48601:tid 48680] [client 213.21.239.4:50304] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/.git;/config"] [unique_id "aSPEpIMM4MaVTk74-AZlMQAAAhc"]
[Mon Nov 24 10:36:20.061137 2025] [:error] [pid 16549:tid 16563] [client 213.21.239.4:50306] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/new/.git/config"] [unique_id "aSPEpKeWW19A99PUw_cAAgAAAUs"]
[Mon Nov 24 10:36:20.061277 2025] [:error] [pid 48601:tid 48672] [client 213.21.239.4:50322] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/static../.git/config"] [unique_id "aSPEpIMM4MaVTk74-AZlMgAAAg8"]
[Mon Nov 24 10:36:20.064036 2025] [:error] [pid 16441:tid 16444] [client 213.21.239.4:50330] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/../config"] [unique_id "aSPEpIq_bc5MOa9HflmoIAAAAIA"]
[Mon Nov 24 10:36:20.066084 2025] [:error] [pid 48601:tid 48673] [client 213.21.239.4:50348] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSPEpIMM4MaVTk74-AZlMwAAAhA"]
[Mon Nov 24 10:36:20.066836 2025] [:error] [pid 16516:tid 16535] [client 213.21.239.4:50356] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/;/.git/config"] [unique_id "aSPEpPqZbniwaNwL8XmvVQAAARA"]
[Mon Nov 24 10:36:20.067427 2025] [:error] [pid 16549:tid 16576] [client 213.21.239.4:50336] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/config"] [unique_id "aSPEpKeWW19A99PUw_cAAwAAAVc"]
[Mon Nov 24 10:36:20.069635 2025] [:error] [pid 16549:tid 16557] [client 213.21.239.4:50370] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au../config"] [unique_id "aSPEpKeWW19A99PUw_cABAAAAUU"]
[Mon Nov 24 10:36:20.070111 2025] [:error] [pid 16441:tid 16450] [client 213.21.239.4:50382] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSPEpIq_bc5MOa9HflmoIQAAAIY"]
[Mon Nov 24 10:36:20.072710 2025] [:error] [pid 16593:tid 16608] [client 213.21.239.4:50308] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git;/config"] [unique_id "aSPEpBVGznHBJI2LKpQECAAAAo0"]
[Mon Nov 24 10:36:22.064603 2025] [:error] [pid 48601:tid 48676] [client 213.21.239.4:56322] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/config"] [unique_id "aSPEpoMM4MaVTk74-AZlPAAAAhM"]
[Mon Nov 24 10:36:22.071074 2025] [:error] [pid 16516:tid 16539] [client 213.21.239.4:56324] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/.git;/config"] [unique_id "aSPEpvqZbniwaNwL8XmvWwAAARQ"]
[Mon Nov 24 10:36:22.076369 2025] [:error] [pid 16549:tid 16558] [client 213.21.239.4:56328] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/../config"] [unique_id "aSPEpqeWW19A99PUw_cADAAAAUY"]
[Mon Nov 24 10:36:22.085481 2025] [:error] [pid 48688:tid 48693] [client 213.21.239.4:56342] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au../config"] [unique_id "aSPEphm2q1FkzLam7A1ZKAAAAkE"]
[Mon Nov 24 10:36:22.089032 2025] [:error] [pid 16441:tid 16450] [client 213.21.239.4:56350] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/config"] [unique_id "aSPEpoq_bc5MOa9HflmoJAAAAIY"]
[Mon Nov 24 10:36:22.089327 2025] [:error] [pid 9630:tid 9651] [client 213.21.239.4:56362] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git;/config"] [unique_id "aSPEpirSgUgPGkizt2qGQAAAAFM"]
[Mon Nov 24 10:36:23.043132 2025] [:error] [pid 48599:tid 48624] [client 213.21.239.4:56376] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/staging/.git/config"] [unique_id "aSPEp5zvu6PDJiRKE3LjfgAAAZU"]
[Mon Nov 24 10:36:23.044214 2025] [:error] [pid 16516:tid 16541] [client 213.21.239.4:56390] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/static../.git/config"] [unique_id "aSPEp_qZbniwaNwL8XmvXQAAARY"]
[Mon Nov 24 10:36:23.045939 2025] [:error] [pid 16441:tid 16446] [client 213.21.239.4:56406] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/static../.git/config"] [unique_id "aSPEp4q_bc5MOa9HflmoJwAAAII"]
[Mon Nov 24 10:36:23.046265 2025] [:error] [pid 16516:tid 16535] [client 213.21.239.4:56410] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/uat/.git/config"] [unique_id "aSPEp_qZbniwaNwL8XmvXgAAARA"]
[Mon Nov 24 10:36:23.047995 2025] [:error] [pid 16441:tid 16463] [client 213.21.239.4:56426] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/web/.git/config"] [unique_id "aSPEp4q_bc5MOa9HflmoKAAAAJM"]
[Mon Nov 24 10:36:23.051288 2025] [:error] [pid 16516:tid 16519] [client 213.21.239.4:56452] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSPEp_qZbniwaNwL8XmvYAAAAQA"]
[Mon Nov 24 10:36:23.051292 2025] [:error] [pid 16516:tid 16538] [client 213.21.239.4:56432] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSPEp_qZbniwaNwL8XmvXwAAARM"]
[Mon Nov 24 10:36:23.052325 2025] [:error] [pid 16516:tid 16527] [client 213.21.239.4:56446] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSPEp_qZbniwaNwL8XmvYQAAAQg"]
[Mon Nov 24 13:48:47.461000 2025] [:error] [pid 48688:tid 48710] [client 209.50.179.185:31037] [client 209.50.179.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/HEAD"] [unique_id "aSPxvxm2q1FkzLam7A14WwAAAlI"]
[Mon Nov 24 13:48:49.375081 2025] [:error] [pid 9630:tid 9632] [client 216.26.225.71:29525] [client 216.26.225.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env"] [unique_id "aSPxwSrSgUgPGkizt2q5zAAAAEA"]
[Mon Nov 24 13:48:50.270169 2025] [:error] [pid 16441:tid 16451] [client 104.207.41.194:59129] [client 104.207.41.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.svn/wc.db"] [unique_id "aSPxwoq_bc5MOa9HflnrZQAAAIc"]
[Mon Nov 24 21:45:43.286176 2025] [:error] [pid 49900:tid 49920] [client 193.32.126.212:58378] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/"] [unique_id "aSRhhzCyPLrvg06aorlJqwAAABI"]
[Mon Nov 24 21:45:43.777895 2025] [:error] [pid 48600:tid 48653] [client 193.32.126.212:58617] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/"] [unique_id "aSRhh_tOzSUAQvWVjBeiMQAAAdc"]
[Mon Nov 24 21:45:44.272836 2025] [:error] [pid 9630:tid 9641] [client 193.32.126.212:58841] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhiCrSgUgPGkizt2o4ZAAAAEk"]
[Mon Nov 24 22:03:09.388522 2025] [:error] [pid 16516:tid 16521] [client 221.121.102.212:14808] [client 221.121.102.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 221.121.102.212, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aSRlnfqZbniwaNwL8XkPpgAAAQI"]
[Mon Nov 24 22:03:09.395130 2025] [:error] [pid 16516:tid 16521] [client 221.121.102.212:14808] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 25 00:21:02.190257 2025] [:error] [pid 49900:tid 49926] [client 172.171.222.131:13854] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Tue Nov 25 00:21:02.440442 2025] [:error] [pid 49900:tid 49917] [client 172.171.222.131:13854] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Tue Nov 25 00:21:02.675623 2025] [:error] [pid 49900:tid 49908] [client 172.171.222.131:13854] File does not exist: /usr/local/apache/htdocs/suspended-page/golden.php
[Tue Nov 25 00:21:02.907878 2025] [:error] [pid 49900:tid 49902] [client 172.171.222.131:13854] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Tue Nov 25 00:21:03.196643 2025] [:error] [pid 49900:tid 49923] [client 172.171.222.131:13854] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Nov 25 00:21:03.424630 2025] [:error] [pid 49900:tid 49911] [client 172.171.222.131:13854] [client 172.171.222.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "aircraft-spruce.com.au"] [uri "/fm.php"] [unique_id "aSSF7zCyPLrvg06aorlrYAAAAAk"]
[Tue Nov 25 00:21:04.103128 2025] [:error] [pid 48601:tid 48681] [client 172.171.222.131:23266] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Tue Nov 25 00:21:04.337100 2025] [:error] [pid 48601:tid 48657] [client 172.171.222.131:23266] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Tue Nov 25 00:21:04.575075 2025] [:error] [pid 48601:tid 48660] [client 172.171.222.131:23266] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Nov 25 00:21:04.811452 2025] [:error] [pid 48601:tid 48662] [client 172.171.222.131:23266] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Tue Nov 25 00:21:05.045318 2025] [:error] [pid 48601:tid 48670] [client 172.171.222.131:23266] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Tue Nov 25 00:21:05.292922 2025] [:error] [pid 48601:tid 48680] [client 172.171.222.131:23266] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bolt.php"] [unique_id "aSSF8YMM4MaVTk74-AYFawAAAhc"]
[Tue Nov 25 00:21:06.014199 2025] [:error] [pid 16516:tid 16543] [client 172.171.222.131:16563] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bolt.php"] [unique_id "aSSF8vqZbniwaNwL8XkkfAAAARg"]
[Tue Nov 25 00:21:07.039996 2025] [:error] [pid 48601:tid 48671] [client 172.171.222.131:12300] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bolt.php"] [unique_id "aSSF84MM4MaVTk74-AYFbAAAAg4"]
[Tue Nov 25 00:21:07.661310 2025] [:error] [pid 48599:tid 48626] [client 172.171.222.131:12307] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bolt.php"] [unique_id "aSSF85zvu6PDJiRKE3JrUgAAAZc"]
[Tue Nov 25 00:21:08.839867 2025] [:error] [pid 16516:tid 16533] [client 172.171.222.131:22900] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/file7.php"] [unique_id "aSSF9PqZbniwaNwL8XkkfgAAAQ4"]
[Tue Nov 25 00:21:09.444619 2025] [:error] [pid 16516:tid 16526] [client 172.171.222.131:23278] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/file7.php"] [unique_id "aSSF9fqZbniwaNwL8XkkgAAAAQc"]
[Tue Nov 25 00:21:10.216514 2025] [:error] [pid 9630:tid 9645] [client 172.171.222.131:9367] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/file7.php"] [unique_id "aSSF9irSgUgPGkizt2pe_QAAAE0"]
[Tue Nov 25 00:21:11.131281 2025] [:error] [pid 48599:tid 48625] [client 172.171.222.131:12299] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/file7.php"] [unique_id "aSSF95zvu6PDJiRKE3JrVAAAAZY"]
[Tue Nov 25 00:21:11.689443 2025] [:error] [pid 48688:tid 48710] [client 172.171.222.131:11977] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gmo.php"] [unique_id "aSSF9xm2q1FkzLam7A3rEwAAAlI"]
[Tue Nov 25 00:21:12.310892 2025] [:error] [pid 48688:tid 48694] [client 172.171.222.131:12341] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gmo.php"] [unique_id "aSSF-Bm2q1FkzLam7A3rFAAAAkI"]
[Tue Nov 25 00:21:13.122198 2025] [:error] [pid 48599:tid 48610] [client 172.171.222.131:23294] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gmo.php"] [unique_id "aSSF-Zzvu6PDJiRKE3JrVgAAAYc"]
[Tue Nov 25 00:21:14.175232 2025] [:error] [pid 9630:tid 9638] [client 172.171.222.131:16539] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gmo.php"] [unique_id "aSSF-irSgUgPGkizt2pfAQAAAEY"]
[Tue Nov 25 00:21:14.860789 2025] [:error] [pid 49900:tid 49912] [client 172.171.222.131:23267] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless2.php"] [unique_id "aSSF-jCyPLrvg06aorlrZgAAAAo"]
[Tue Nov 25 00:21:15.681805 2025] [:error] [pid 48688:tid 48697] [client 172.171.222.131:9440] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless2.php"] [unique_id "aSSF-xm2q1FkzLam7A3rFgAAAkU"]
[Tue Nov 25 00:21:16.302879 2025] [:error] [pid 48688:tid 48695] [client 172.171.222.131:1609] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless2.php"] [unique_id "aSSF_Bm2q1FkzLam7A3rGAAAAkM"]
[Tue Nov 25 00:21:16.942560 2025] [:error] [pid 16593:tid 16597] [client 172.171.222.131:9456] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless2.php"] [unique_id "aSSF_BVGznHBJI2LKpSCTAAAAoI"]
[Tue Nov 25 00:21:17.469160 2025] [:error] [pid 48601:tid 48659] [client 172.171.222.131:23260] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-blog.php"] [unique_id "aSSF_YMM4MaVTk74-AYFdAAAAgI"]
[Tue Nov 25 00:21:18.147969 2025] [:error] [pid 48600:tid 48638] [client 172.171.222.131:16523] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-blog.php"] [unique_id "aSSF_vtOzSUAQvWVjBe3AQAAAcg"]
[Tue Nov 25 00:21:18.709658 2025] [:error] [pid 16441:tid 16452] [client 172.171.222.131:14705] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-blog.php"] [unique_id "aSSF_oq_bc5MOa9HflnI7QAAAIg"]
[Tue Nov 25 00:21:19.420137 2025] [:error] [pid 48599:tid 48622] [client 172.171.222.131:11539] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-blog.php"] [unique_id "aSSF_5zvu6PDJiRKE3JrWgAAAZM"]
[Tue Nov 25 00:21:20.130992 2025] [:error] [pid 48601:tid 48681] [client 172.171.222.131:23270] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-class.php"] [unique_id "aSSGAIMM4MaVTk74-AYFdQAAAhg"]
[Tue Nov 25 00:21:20.646954 2025] [:error] [pid 48600:tid 48649] [client 172.171.222.131:7565] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-class.php"] [unique_id "aSSGAPtOzSUAQvWVjBe3AwAAAdM"]
[Tue Nov 25 00:21:21.199848 2025] [:error] [pid 48688:tid 48699] [client 172.171.222.131:16539] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-class.php"] [unique_id "aSSGARm2q1FkzLam7A3rHQAAAkc"]
[Tue Nov 25 00:21:21.798364 2025] [:error] [pid 48600:tid 48654] [client 172.171.222.131:7553] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-class.php"] [unique_id "aSSGAftOzSUAQvWVjBe3BAAAAdg"]
[Tue Nov 25 00:21:22.966110 2025] [:error] [pid 16441:tid 16458] [client 172.171.222.131:9458] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wsa.php"] [unique_id "aSSGAoq_bc5MOa9HflnI8AAAAI4"]
[Tue Nov 25 00:21:23.765942 2025] [:error] [pid 48600:tid 48652] [client 172.171.222.131:1610] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wsa.php"] [unique_id "aSSGA_tOzSUAQvWVjBe3CAAAAdY"]
[Tue Nov 25 00:21:24.454053 2025] [:error] [pid 49900:tid 49902] [client 172.171.222.131:1635] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wsa.php"] [unique_id "aSSGBDCyPLrvg06aorlrbgAAAAA"]
[Tue Nov 25 00:21:25.316114 2025] [:error] [pid 16516:tid 16542] [client 172.171.222.131:2035] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wsa.php"] [unique_id "aSSGBfqZbniwaNwL8XkkhwAAARc"]
[Tue Nov 25 00:21:26.713747 2025] [:error] [pid 49900:tid 49906] [client 172.171.222.131:9415] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/z.php"] [unique_id "aSSGBjCyPLrvg06aorlrcwAAAAQ"]
[Tue Nov 25 00:21:27.491678 2025] [:error] [pid 16593:tid 16605] [client 172.171.222.131:2018] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/z.php"] [unique_id "aSSGBxVGznHBJI2LKpSCVAAAAoo"]
[Tue Nov 25 00:21:28.073929 2025] [:error] [pid 16593:tid 16615] [client 172.171.222.131:1621] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/z.php"] [unique_id "aSSGCBVGznHBJI2LKpSCVQAAApQ"]
[Tue Nov 25 00:21:28.652451 2025] [:error] [pid 49900:tid 49903] [client 172.171.222.131:7567] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/z.php"] [unique_id "aSSGCDCyPLrvg06aorlrdQAAAAE"]
[Tue Nov 25 00:21:29.157664 2025] [:error] [pid 48600:tid 48635] [client 172.171.222.131:1647] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/nc4.php"] [unique_id "aSSGCftOzSUAQvWVjBe3DAAAAcU"]
[Tue Nov 25 00:21:30.222442 2025] [:error] [pid 9630:tid 9641] [client 172.171.222.131:16722] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/nc4.php"] [unique_id "aSSGCirSgUgPGkizt2pfEgAAAEk"]
[Tue Nov 25 00:21:30.843798 2025] [:error] [pid 9630:tid 9652] [client 172.171.222.131:7599] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/nc4.php"] [unique_id "aSSGCirSgUgPGkizt2pfEwAAAFQ"]
[Tue Nov 25 00:21:31.551802 2025] [:error] [pid 48599:tid 48613] [client 172.171.222.131:1636] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/nc4.php"] [unique_id "aSSGC5zvu6PDJiRKE3JrYgAAAYo"]
[Tue Nov 25 00:21:32.333210 2025] [:error] [pid 49900:tid 49914] [client 172.171.222.131:9409] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ahax.php"] [unique_id "aSSGDDCyPLrvg06aorlreAAAAAw"]
[Tue Nov 25 00:21:33.485130 2025] [:error] [pid 16593:tid 16614] [client 172.171.222.131:12900] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ahax.php"] [unique_id "aSSGDRVGznHBJI2LKpSCWQAAApM"]
[Tue Nov 25 00:21:34.318682 2025] [:error] [pid 48599:tid 48624] [client 172.171.222.131:14147] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ahax.php"] [unique_id "aSSGDpzvu6PDJiRKE3JrYwAAAZU"]
[Tue Nov 25 00:21:35.185010 2025] [:error] [pid 48601:tid 48676] [client 172.171.222.131:2039] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ahax.php"] [unique_id "aSSGD4MM4MaVTk74-AYFegAAAhM"]
[Tue Nov 25 00:21:35.927891 2025] [:error] [pid 48688:tid 48705] [client 172.171.222.131:10772] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/dejavu.php"] [unique_id "aSSGDxm2q1FkzLam7A3rIgAAAk0"]
[Tue Nov 25 00:21:36.540411 2025] [:error] [pid 48601:tid 48678] [client 172.171.222.131:15185] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/dejavu.php"] [unique_id "aSSGEIMM4MaVTk74-AYFfAAAAhU"]
[Tue Nov 25 00:21:37.293705 2025] [:error] [pid 16549:tid 16556] [client 172.171.222.131:2047] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/dejavu.php"] [unique_id "aSSGEaeWW19A99PUw_d-PQAAAUQ"]
[Tue Nov 25 00:21:38.061760 2025] [:error] [pid 48600:tid 48643] [client 172.171.222.131:23239] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/dejavu.php"] [unique_id "aSSGEvtOzSUAQvWVjBe3DwAAAc0"]
[Tue Nov 25 00:21:38.806174 2025] [:error] [pid 16516:tid 16525] [client 172.171.222.131:15168] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/config.php"] [unique_id "aSSGEvqZbniwaNwL8XkkiwAAAQY"]
[Tue Nov 25 00:21:40.098138 2025] [:error] [pid 16441:tid 16468] [client 172.171.222.131:12299] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/config.php"] [unique_id "aSSGFIq_bc5MOa9HflnJAAAAAJg"]
[Tue Nov 25 00:21:40.865389 2025] [:error] [pid 9630:tid 9636] [client 172.171.222.131:15749] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/config.php"] [unique_id "aSSGFCrSgUgPGkizt2pfIQAAAEQ"]
[Tue Nov 25 00:21:42.040199 2025] [:error] [pid 48599:tid 48617] [client 172.171.222.131:2023] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/config.php"] [unique_id "aSSGFpzvu6PDJiRKE3JraAAAAY4"]
[Tue Nov 25 00:21:42.815414 2025] [:error] [pid 49900:tid 49911] [client 172.171.222.131:17466] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/atomlib.php"] [unique_id "aSSGFjCyPLrvg06aorlrjgAAAAk"]
[Tue Nov 25 00:21:43.449668 2025] [:error] [pid 48688:tid 48695] [client 172.171.222.131:24717] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/atomlib.php"] [unique_id "aSSGFxm2q1FkzLam7A3rJQAAAkM"]
[Tue Nov 25 00:21:44.278323 2025] [:error] [pid 16593:tid 16605] [client 172.171.222.131:14179] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/atomlib.php"] [unique_id "aSSGGBVGznHBJI2LKpSCYgAAAoo"]
[Tue Nov 25 00:21:44.959832 2025] [:error] [pid 48601:tid 48673] [client 172.171.222.131:24714] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/atomlib.php"] [unique_id "aSSGGIMM4MaVTk74-AYFlwAAAhA"]
[Tue Nov 25 00:21:45.617204 2025] [:error] [pid 48601:tid 48666] [client 172.171.222.131:12911] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/css.php"] [unique_id "aSSGGYMM4MaVTk74-AYFmAAAAgk"]
[Tue Nov 25 00:21:46.269557 2025] [:error] [pid 48599:tid 48627] [client 172.171.222.131:10808] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/css.php"] [unique_id "aSSGGpzvu6PDJiRKE3JrkQAAAZg"]
[Tue Nov 25 00:21:47.046273 2025] [:error] [pid 48599:tid 48609] [client 172.171.222.131:14145] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/css.php"] [unique_id "aSSGG5zvu6PDJiRKE3JrkwAAAYY"]
[Tue Nov 25 00:21:47.824226 2025] [:error] [pid 16593:tid 16598] [client 172.171.222.131:15699] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/css.php"] [unique_id "aSSGGxVGznHBJI2LKpSCZQAAAoM"]
[Tue Nov 25 00:21:48.551112 2025] [:error] [pid 16441:tid 16453] [client 172.171.222.131:17046] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/past.php"] [unique_id "aSSGHIq_bc5MOa9HflnJBgAAAIk"]
[Tue Nov 25 00:21:49.182456 2025] [:error] [pid 49900:tid 49905] [client 172.171.222.131:10762] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/past.php"] [unique_id "aSSGHTCyPLrvg06aorlrlQAAAAM"]
[Tue Nov 25 00:21:50.194098 2025] [:error] [pid 49900:tid 49914] [client 172.171.222.131:12888] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/past.php"] [unique_id "aSSGHjCyPLrvg06aorlrmAAAAAw"]
[Tue Nov 25 00:21:50.985019 2025] [:error] [pid 48688:tid 48714] [client 172.171.222.131:14749] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/past.php"] [unique_id "aSSGHhm2q1FkzLam7A3rNQAAAlY"]
[Tue Nov 25 00:21:51.543795 2025] [:error] [pid 16516:tid 16543] [client 172.171.222.131:15686] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin.php"] [unique_id "aSSGH_qZbniwaNwL8XkknQAAARg"]
[Tue Nov 25 00:21:52.210162 2025] [:error] [pid 48688:tid 48695] [client 172.171.222.131:14763] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin.php"] [unique_id "aSSGIBm2q1FkzLam7A3rNwAAAkM"]
[Tue Nov 25 00:21:52.808798 2025] [:error] [pid 48688:tid 48712] [client 172.171.222.131:15179] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin.php"] [unique_id "aSSGIBm2q1FkzLam7A3rOAAAAlQ"]
[Tue Nov 25 00:21:53.437233 2025] [:error] [pid 48601:tid 48661] [client 172.171.222.131:17423] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin.php"] [unique_id "aSSGIYMM4MaVTk74-AYFnAAAAgQ"]
[Tue Nov 25 00:21:54.037209 2025] [:error] [pid 16441:tid 16444] [client 172.171.222.131:15742] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ol.php"] [unique_id "aSSGIoq_bc5MOa9HflnJDwAAAIA"]
[Tue Nov 25 00:21:54.645730 2025] [:error] [pid 16441:tid 16450] [client 172.171.222.131:1498] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ol.php"] [unique_id "aSSGIoq_bc5MOa9HflnJEAAAAIY"]
[Tue Nov 25 00:21:55.256116 2025] [:error] [pid 9630:tid 9655] [client 172.171.222.131:15714] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ol.php"] [unique_id "aSSGIyrSgUgPGkizt2pfQAAAAFc"]
[Tue Nov 25 00:21:56.460388 2025] [:error] [pid 16516:tid 16536] [client 172.171.222.131:13459] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ol.php"] [unique_id "aSSGJPqZbniwaNwL8XkkoAAAARE"]
[Tue Nov 25 00:21:57.124711 2025] [:error] [pid 16549:tid 16559] [client 172.171.222.131:10796] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/we.php"] [unique_id "aSSGJaeWW19A99PUw_d-RAAAAUc"]
[Tue Nov 25 00:21:58.624875 2025] [:error] [pid 16593:tid 16607] [client 172.171.222.131:17027] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/we.php"] [unique_id "aSSGJhVGznHBJI2LKpSCawAAAow"]
[Tue Nov 25 00:21:59.857849 2025] [:error] [pid 16441:tid 16445] [client 172.171.222.131:9066] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/we.php"] [unique_id "aSSGJ4q_bc5MOa9HflnJEgAAAIE"]
[Tue Nov 25 00:22:00.744680 2025] [:error] [pid 48600:tid 48635] [client 172.171.222.131:1363] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/we.php"] [unique_id "aSSGKPtOzSUAQvWVjBe3HAAAAcU"]
[Tue Nov 25 00:22:01.665442 2025] [:error] [pid 9630:tid 9649] [client 172.171.222.131:14769] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/404.php"] [unique_id "aSSGKSrSgUgPGkizt2pfSQAAAFE"]
[Tue Nov 25 00:22:02.471238 2025] [:error] [pid 48600:tid 48634] [client 172.171.222.131:9076] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/404.php"] [unique_id "aSSGKvtOzSUAQvWVjBe3HgAAAcQ"]
[Tue Nov 25 00:22:03.121788 2025] [:error] [pid 9630:tid 9647] [client 172.171.222.131:14747] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/404.php"] [unique_id "aSSGKyrSgUgPGkizt2pfTQAAAE8"]
[Tue Nov 25 00:22:03.913478 2025] [:error] [pid 48600:tid 48630] [client 172.171.222.131:1532] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/404.php"] [unique_id "aSSGK_tOzSUAQvWVjBe3IAAAAcA"]
[Tue Nov 25 00:22:04.834494 2025] [:error] [pid 48599:tid 48604] [client 172.171.222.131:15681] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/goods.php"] [unique_id "aSSGLJzvu6PDJiRKE3JrnQAAAYE"]
[Tue Nov 25 00:22:06.402300 2025] [:error] [pid 16516:tid 16524] [client 172.171.222.131:14733] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Nov 25 00:22:06.645032 2025] [:error] [pid 16516:tid 16528] [client 172.171.222.131:14733] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php
[Tue Nov 25 00:22:06.891000 2025] [:error] [pid 16516:tid 16534] [client 172.171.222.131:14733] File does not exist: /usr/local/apache/htdocs/suspended-page/ot.php
[Tue Nov 25 00:22:07.324886 2025] [:error] [pid 16516:tid 16526] [client 172.171.222.131:14733] File does not exist: /usr/local/apache/htdocs/suspended-page/lc.php
[Tue Nov 25 00:22:07.556375 2025] [:error] [pid 16516:tid 16522] [client 172.171.222.131:14733] File does not exist: /usr/local/apache/htdocs/suspended-page/cool.php
[Tue Nov 25 00:22:08.125824 2025] [:error] [pid 16516:tid 16533] [client 172.171.222.131:14733] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Nov 25 00:22:08.375772 2025] [:error] [pid 16516:tid 16530] [client 172.171.222.131:14733] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Nov 25 00:22:08.628291 2025] [:error] [pid 16516:tid 16520] [client 172.171.222.131:14733] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Tue Nov 25 00:22:08.859959 2025] [:error] [pid 16516:tid 16531] [client 172.171.222.131:14733] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue Nov 25 00:22:09.110259 2025] [:error] [pid 16516:tid 16539] [client 172.171.222.131:14733] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue Nov 25 00:22:09.342902 2025] [:error] [pid 16516:tid 16527] [client 172.171.222.131:14733] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Tue Nov 25 00:22:09.787395 2025] [:error] [pid 16516:tid 16535] [client 172.171.222.131:14733] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/astab.php"] [unique_id "aSSGMfqZbniwaNwL8XkktwAAARA"]
[Tue Nov 25 00:22:11.059368 2025] [:error] [pid 16549:tid 16566] [client 172.171.222.131:11597] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/astab.php"] [unique_id "aSSGM6eWW19A99PUw_d-TAAAAU4"]
[Tue Nov 25 00:22:11.595478 2025] [:error] [pid 16441:tid 16455] [client 172.171.222.131:9077] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/astab.php"] [unique_id "aSSGM4q_bc5MOa9HflnJIQAAAIs"]
[Tue Nov 25 00:22:12.396195 2025] [:error] [pid 16441:tid 16448] [client 172.171.222.131:9067] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/astab.php"] [unique_id "aSSGNIq_bc5MOa9HflnJJAAAAIQ"]
[Tue Nov 25 00:22:13.494405 2025] [:error] [pid 48599:tid 48614] [client 172.171.222.131:23531] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/xl.php"] [unique_id "aSSGNZzvu6PDJiRKE3JrogAAAYs"]
[Tue Nov 25 00:22:14.261653 2025] [:error] [pid 48688:tid 48714] [client 172.171.222.131:12825] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/xl.php"] [unique_id "aSSGNhm2q1FkzLam7A3rPgAAAlY"]
[Tue Nov 25 00:22:15.315067 2025] [:error] [pid 48599:tid 48613] [client 172.171.222.131:11864] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/xl.php"] [unique_id "aSSGN5zvu6PDJiRKE3JrpAAAAYo"]
[Tue Nov 25 00:22:16.657002 2025] [:error] [pid 48600:tid 48638] [client 172.171.222.131:13173] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/xl.php"] [unique_id "aSSGOPtOzSUAQvWVjBe3KwAAAcg"]
[Tue Nov 25 00:22:18.146739 2025] [:error] [pid 48601:tid 48675] [client 172.171.222.131:22650] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/file17.php"] [unique_id "aSSGOoMM4MaVTk74-AYFrQAAAhI"]
[Tue Nov 25 00:22:19.517851 2025] [:error] [pid 16441:tid 16464] [client 172.171.222.131:8999] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/file17.php"] [unique_id "aSSGO4q_bc5MOa9HflnJLAAAAJQ"]
[Tue Nov 25 00:22:20.397703 2025] [:error] [pid 16549:tid 16562] [client 172.171.222.131:9007] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/file17.php"] [unique_id "aSSGPKeWW19A99PUw_d-UAAAAUo"]
[Tue Nov 25 00:22:21.340009 2025] [:error] [pid 9630:tid 9642] [client 172.171.222.131:22409] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/file17.php"] [unique_id "aSSGPSrSgUgPGkizt2pfXQAAAEo"]
[Tue Nov 25 00:22:22.611134 2025] [:error] [pid 16549:tid 16557] [client 172.171.222.131:8754] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/pepe.php"] [unique_id "aSSGPqeWW19A99PUw_d-UQAAAUU"]
[Tue Nov 25 00:22:23.928243 2025] [:error] [pid 16593:tid 16612] [client 172.171.222.131:13125] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/pepe.php"] [unique_id "aSSGPxVGznHBJI2LKpSCeAAAApE"]
[Tue Nov 25 00:22:25.017435 2025] [:error] [pid 48600:tid 48643] [client 172.171.222.131:12838] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/pepe.php"] [unique_id "aSSGQftOzSUAQvWVjBe3LQAAAc0"]
[Tue Nov 25 00:22:27.459799 2025] [:error] [pid 16441:tid 16458] [client 172.171.222.131:12808] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/pepe.php"] [unique_id "aSSGQ4q_bc5MOa9HflnJMAAAAI4"]
[Tue Nov 25 00:22:29.582491 2025] [:error] [pid 16441:tid 16453] [client 172.171.222.131:9010] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/about.php"] [unique_id "aSSGRYq_bc5MOa9HflnJNAAAAIk"]
[Tue Nov 25 00:22:31.353723 2025] [:error] [pid 16549:tid 16575] [client 172.171.222.131:24713] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/about.php"] [unique_id "aSSGR6eWW19A99PUw_d-VwAAAVY"]
[Tue Nov 25 00:22:32.331875 2025] [:error] [pid 48600:tid 48654] [client 172.171.222.131:9018] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/about.php"] [unique_id "aSSGSPtOzSUAQvWVjBe3MAAAAdg"]
[Tue Nov 25 00:22:32.926011 2025] [:error] [pid 9630:tid 9654] [client 172.171.222.131:15251] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/about.php"] [unique_id "aSSGSCrSgUgPGkizt2pfaAAAAFY"]
[Tue Nov 25 00:22:33.617329 2025] [:error] [pid 48599:tid 48621] [client 172.171.222.131:22416] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-update.php"] [unique_id "aSSGSZzvu6PDJiRKE3JrrAAAAZI"]
[Tue Nov 25 00:22:34.224031 2025] [:error] [pid 48601:tid 48676] [client 172.171.222.131:9011] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-update.php"] [unique_id "aSSGSoMM4MaVTk74-AYFsgAAAhM"]
[Tue Nov 25 00:22:34.945714 2025] [:error] [pid 16549:tid 16564] [client 172.171.222.131:8710] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-update.php"] [unique_id "aSSGSqeWW19A99PUw_d-WQAAAUw"]
[Tue Nov 25 00:22:36.173124 2025] [:error] [pid 16593:tid 16614] [client 172.171.222.131:8981] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-update.php"] [unique_id "aSSGTBVGznHBJI2LKpSCgQAAApM"]
[Tue Nov 25 00:22:37.450314 2025] [:error] [pid 16441:tid 16445] [client 172.171.222.131:13135] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless.php"] [unique_id "aSSGTYq_bc5MOa9HflnJPwAAAIE"]
[Tue Nov 25 00:22:38.224604 2025] [:error] [pid 16441:tid 16447] [client 172.171.222.131:22633] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless.php"] [unique_id "aSSGToq_bc5MOa9HflnJQgAAAIM"]
[Tue Nov 25 00:22:39.392209 2025] [:error] [pid 48688:tid 48693] [client 172.171.222.131:25153] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless.php"] [unique_id "aSSGTxm2q1FkzLam7A3rRgAAAkE"]
[Tue Nov 25 00:22:40.315642 2025] [:error] [pid 49900:tid 49924] [client 172.171.222.131:8723] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bless.php"] [unique_id "aSSGUDCyPLrvg06aorlrugAAABY"]
[Tue Nov 25 00:22:41.362476 2025] [:error] [pid 9630:tid 9652] [client 172.171.222.131:8987] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/faq.php"] [unique_id "aSSGUSrSgUgPGkizt2pfbgAAAFQ"]
[Tue Nov 25 00:22:42.795745 2025] [:error] [pid 49900:tid 49918] [client 172.171.222.131:8994] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/faq.php"] [unique_id "aSSGUjCyPLrvg06aorlruwAAABA"]
[Tue Nov 25 00:22:44.331753 2025] [:error] [pid 49900:tid 49915] [client 172.171.222.131:1162] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/faq.php"] [unique_id "aSSGVDCyPLrvg06aorlrwAAAAA0"]
[Tue Nov 25 00:22:45.113603 2025] [:error] [pid 48601:tid 48673] [client 172.171.222.131:10390] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/faq.php"] [unique_id "aSSGVYMM4MaVTk74-AYFuAAAAhA"]
[Tue Nov 25 00:22:46.155356 2025] [:error] [pid 48601:tid 48657] [client 172.171.222.131:22614] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abcd.php"] [unique_id "aSSGVoMM4MaVTk74-AYFugAAAgA"]
[Tue Nov 25 00:22:46.649563 2025] [:error] [pid 48599:tid 48613] [client 172.171.222.131:13410] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abcd.php"] [unique_id "aSSGVpzvu6PDJiRKE3JrsQAAAYo"]
[Tue Nov 25 00:22:47.502106 2025] [:error] [pid 48599:tid 48611] [client 172.171.222.131:1251] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abcd.php"] [unique_id "aSSGV5zvu6PDJiRKE3JrsgAAAYg"]
[Tue Nov 25 00:22:48.285136 2025] [:error] [pid 48600:tid 48651] [client 172.171.222.131:24755] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abcd.php"] [unique_id "aSSGWPtOzSUAQvWVjBe3OwAAAdU"]
[Tue Nov 25 00:22:49.418690 2025] [:error] [pid 16441:tid 16465] [client 172.171.222.131:22441] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/CLA.php"] [unique_id "aSSGWYq_bc5MOa9HflnJSgAAAJU"]
[Tue Nov 25 00:22:50.387417 2025] [:error] [pid 9630:tid 9642] [client 172.171.222.131:10463] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/CLA.php"] [unique_id "aSSGWirSgUgPGkizt2pfeAAAAEo"]
[Tue Nov 25 00:22:50.993075 2025] [:error] [pid 16441:tid 16447] [client 172.171.222.131:24707] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/CLA.php"] [unique_id "aSSGWoq_bc5MOa9HflnJUAAAAIM"]
[Tue Nov 25 00:22:51.912299 2025] [:error] [pid 16516:tid 16528] [client 172.171.222.131:22546] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/CLA.php"] [unique_id "aSSGW_qZbniwaNwL8XkkyAAAAQk"]
[Tue Nov 25 00:22:52.674336 2025] [:error] [pid 48601:tid 48672] [client 172.171.222.131:8714] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/chosen.php"] [unique_id "aSSGXIMM4MaVTk74-AYFvQAAAg8"]
[Tue Nov 25 00:22:53.534002 2025] [:error] [pid 16549:tid 16553] [client 172.171.222.131:22590] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/chosen.php"] [unique_id "aSSGXaeWW19A99PUw_d-YAAAAUE"]
[Tue Nov 25 00:22:54.152262 2025] [:error] [pid 48601:tid 48670] [client 172.171.222.131:11832] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/chosen.php"] [unique_id "aSSGXoMM4MaVTk74-AYFvwAAAg0"]
[Tue Nov 25 00:22:54.993908 2025] [:error] [pid 16441:tid 16457] [client 172.171.222.131:1297] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/chosen.php"] [unique_id "aSSGXoq_bc5MOa9HflnJVAAAAI0"]
[Tue Nov 25 00:22:55.613689 2025] [:error] [pid 48600:tid 48649] [client 172.171.222.131:16963] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-mn.php"] [unique_id "aSSGX_tOzSUAQvWVjBe3PwAAAdM"]
[Tue Nov 25 00:22:56.657080 2025] [:error] [pid 16441:tid 16458] [client 172.171.222.131:1337] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-mn.php"] [unique_id "aSSGYIq_bc5MOa9HflnJVQAAAI4"]
[Tue Nov 25 00:22:57.361255 2025] [:error] [pid 9630:tid 9632] [client 172.171.222.131:17021] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-mn.php"] [unique_id "aSSGYSrSgUgPGkizt2pfewAAAEA"]
[Tue Nov 25 00:22:58.579101 2025] [:error] [pid 16593:tid 16599] [client 172.171.222.131:10876] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-mn.php"] [unique_id "aSSGYhVGznHBJI2LKpSCiwAAAoQ"]
[Tue Nov 25 00:22:59.744153 2025] [:error] [pid 16593:tid 16611] [client 172.171.222.131:22693] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ss.php"] [unique_id "aSSGYxVGznHBJI2LKpSCjAAAApA"]
[Tue Nov 25 00:23:01.249298 2025] [:error] [pid 9630:tid 9638] [client 172.171.222.131:11797] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ss.php"] [unique_id "aSSGZSrSgUgPGkizt2pffwAAAEY"]
[Tue Nov 25 00:23:01.895936 2025] [:error] [pid 48599:tid 48615] [client 172.171.222.131:22702] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ss.php"] [unique_id "aSSGZZzvu6PDJiRKE3JruAAAAYw"]
[Tue Nov 25 00:23:02.816003 2025] [:error] [pid 16516:tid 16542] [client 172.171.222.131:22534] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ss.php"] [unique_id "aSSGZvqZbniwaNwL8XkkywAAARc"]
[Tue Nov 25 00:23:04.455420 2025] [:error] [pid 16593:tid 16616] [client 172.171.222.131:1114] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-logiin.php"] [unique_id "aSSGaBVGznHBJI2LKpSCkgAAApU"]
[Tue Nov 25 00:23:05.682116 2025] [:error] [pid 9630:tid 9634] [client 172.171.222.131:22717] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-logiin.php"] [unique_id "aSSGaSrSgUgPGkizt2pfhQAAAEI"]
[Tue Nov 25 00:23:07.238623 2025] [:error] [pid 48688:tid 48701] [client 172.171.222.131:22553] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-logiin.php"] [unique_id "aSSGaxm2q1FkzLam7A3rVgAAAkk"]
[Tue Nov 25 00:23:08.123334 2025] [:error] [pid 49900:tid 49922] [client 172.171.222.131:1328] [client 172.171.222.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-logiin.php"] [unique_id "aSSGbDCyPLrvg06aorlrzwAAABQ"]
[Tue Nov 25 04:11:31.025654 2025] [:error] [pid 14688:tid 14707] [client 40.70.219.96:24525] [client 40.70.219.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/SimplePie/network.php"] [unique_id "aSS7829vYrBoEsiDnizLTgAAARE"]
[Tue Nov 25 04:11:34.441323 2025] [:error] [pid 14076:tid 14083] [client 40.70.219.96:24523] [client 40.70.219.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSS79nsB4Gz6Qw-pvBv54QAAAAI"]
[Tue Nov 25 04:11:36.035601 2025] [:error] [pid 14168:tid 14179] [client 40.70.219.96:24559] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Tue Nov 25 04:11:36.250450 2025] [:error] [pid 14168:tid 14186] [client 40.70.219.96:24559] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Tue Nov 25 04:11:36.489455 2025] [:error] [pid 14168:tid 14187] [client 40.70.219.96:24559] File does not exist: /usr/local/apache/htdocs/suspended-page/adds.php
[Tue Nov 25 04:11:36.706469 2025] [:error] [pid 14168:tid 14193] [client 40.70.219.96:24559] [client 40.70.219.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSS7-PR-ZDU0QEgAIItS2QAAANY"]
[Tue Nov 25 04:11:39.186854 2025] [:error] [pid 14688:tid 14693] [client 40.70.219.96:24452] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Nov 25 04:11:39.634272 2025] [:error] [pid 14688:tid 14700] [client 40.70.219.96:24452] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Tue Nov 25 04:11:39.864448 2025] [:error] [pid 14688:tid 14690] [client 40.70.219.96:24452] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Tue Nov 25 04:11:40.284529 2025] [:error] [pid 14688:tid 14705] [client 40.70.219.96:24452] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/default.php"] [unique_id "aSS7_G9vYrBoEsiDnizLdQAAAQ8"]
[Tue Nov 25 04:11:42.703462 2025] [:error] [pid 14688:tid 14704] [client 40.70.219.96:24467] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/default.php"] [unique_id "aSS7_m9vYrBoEsiDnizLdwAAAQ4"]
[Tue Nov 25 04:11:45.129170 2025] [:error] [pid 14078:tid 14150] [client 40.70.219.96:24533] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/default.php"] [unique_id "aSS8AdVXYbb0ii_rVoI1-AAAAI0"]
[Tue Nov 25 04:11:46.747028 2025] [:error] [pid 14688:tid 14697] [client 40.70.219.96:24532] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/default.php"] [unique_id "aSS8Am9vYrBoEsiDnizLfQAAAQc"]
[Tue Nov 25 04:11:48.439519 2025] [:error] [pid 14688:tid 14712] [client 40.70.219.96:24459] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/db.php"] [unique_id "aSS8BG9vYrBoEsiDnizLgQAAARY"]
[Tue Nov 25 04:11:50.492581 2025] [:error] [pid 14077:tid 14113] [client 40.70.219.96:24538] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/db.php"] [unique_id "aSS8BhG9n7UHEkwDTyg93AAAAEM"]
[Tue Nov 25 04:11:51.681619 2025] [:error] [pid 14168:tid 14191] [client 40.70.219.96:24575] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/db.php"] [unique_id "aSS8B_R-ZDU0QEgAIItS5QAAANQ"]
[Tue Nov 25 04:11:53.622066 2025] [:error] [pid 14688:tid 14698] [client 40.70.219.96:24460] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/db.php"] [unique_id "aSS8CW9vYrBoEsiDnizLigAAAQg"]
[Tue Nov 25 04:11:56.117939 2025] [:error] [pid 14168:tid 14188] [client 40.70.219.96:24521] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gecko.php"] [unique_id "aSS8DPR-ZDU0QEgAIItS6gAAANE"]
[Tue Nov 25 04:11:58.750763 2025] [:error] [pid 14076:tid 14089] [client 40.70.219.96:24569] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gecko.php"] [unique_id "aSS8DnsB4Gz6Qw-pvBv57AAAAAg"]
[Tue Nov 25 04:12:04.214887 2025] [:error] [pid 14078:tid 14147] [client 40.70.219.96:24449] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gecko.php"] [unique_id "aSS8FNVXYbb0ii_rVoI2BAAAAIo"]
[Tue Nov 25 04:12:06.691405 2025] [:error] [pid 14168:tid 14187] [client 40.70.219.96:24454] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gecko.php"] [unique_id "aSS8FvR-ZDU0QEgAIItS8AAAANA"]
[Tue Nov 25 04:12:08.130635 2025] [:error] [pid 14168:tid 14192] [client 40.70.219.96:24554] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abe.php"] [unique_id "aSS8GPR-ZDU0QEgAIItS8gAAANU"]
[Tue Nov 25 04:12:09.719267 2025] [:error] [pid 14168:tid 14188] [client 40.70.219.96:24516] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abe.php"] [unique_id "aSS8GfR-ZDU0QEgAIItS9gAAANE"]
[Tue Nov 25 04:12:11.369178 2025] [:error] [pid 14077:tid 14122] [client 40.70.219.96:24547] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abe.php"] [unique_id "aSS8GxG9n7UHEkwDTyg95QAAAEw"]
[Tue Nov 25 04:12:13.595803 2025] [:error] [pid 14077:tid 14111] [client 40.70.219.96:24540] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abe.php"] [unique_id "aSS8HRG9n7UHEkwDTyg95gAAAEE"]
[Tue Nov 25 04:12:16.391455 2025] [:error] [pid 14077:tid 14115] [client 40.70.219.96:24470] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bs1.php"] [unique_id "aSS8IBG9n7UHEkwDTyg96AAAAEU"]
[Tue Nov 25 04:12:18.689287 2025] [:error] [pid 14077:tid 14118] [client 40.70.219.96:24450] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bs1.php"] [unique_id "aSS8IhG9n7UHEkwDTyg97gAAAEg"]
[Tue Nov 25 04:12:19.910156 2025] [:error] [pid 14168:tid 14185] [client 40.70.219.96:24473] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bs1.php"] [unique_id "aSS8I_R-ZDU0QEgAIItS-wAAAM4"]
[Tue Nov 25 04:12:20.918385 2025] [:error] [pid 14688:tid 14711] [client 40.70.219.96:24562] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bs1.php"] [unique_id "aSS8JG9vYrBoEsiDnizLoQAAARU"]
[Tue Nov 25 04:12:22.461968 2025] [:error] [pid 14688:tid 14702] [client 40.70.219.96:24475] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/content.php"] [unique_id "aSS8Jm9vYrBoEsiDnizLowAAAQw"]
[Tue Nov 25 04:12:24.932880 2025] [:error] [pid 14168:tid 14191] [client 40.70.219.96:24545] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/content.php"] [unique_id "aSS8KPR-ZDU0QEgAIItS_gAAANQ"]
[Tue Nov 25 04:12:26.197517 2025] [:error] [pid 14077:tid 14122] [client 40.70.219.96:24530] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/content.php"] [unique_id "aSS8KhG9n7UHEkwDTyg98gAAAEw"]
[Tue Nov 25 04:12:27.273797 2025] [:error] [pid 14077:tid 14120] [client 40.70.219.96:24548] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/content.php"] [unique_id "aSS8KxG9n7UHEkwDTyg99AAAAEo"]
[Tue Nov 25 04:12:28.899097 2025] [:error] [pid 14077:tid 14116] [client 40.70.219.96:24384] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cc.php"] [unique_id "aSS8LBG9n7UHEkwDTyg99gAAAEY"]
[Tue Nov 25 04:12:29.959732 2025] [:error] [pid 14168:tid 14176] [client 40.70.219.96:24513] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cc.php"] [unique_id "aSS8LfR-ZDU0QEgAIItTAwAAAMU"]
[Tue Nov 25 04:12:31.061760 2025] [:error] [pid 14077:tid 14132] [client 40.70.219.96:24466] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cc.php"] [unique_id "aSS8LxG9n7UHEkwDTyg9-QAAAFY"]
[Tue Nov 25 04:12:32.635180 2025] [:error] [pid 14688:tid 14699] [client 40.70.219.96:24464] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cc.php"] [unique_id "aSS8MG9vYrBoEsiDnizLswAAAQk"]
[Tue Nov 25 04:12:35.413532 2025] [:error] [pid 14688:tid 14708] [client 40.70.219.96:24551] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-cron.php"] [unique_id "aSS8M29vYrBoEsiDnizLuwAAARI"]
[Tue Nov 25 04:12:38.863423 2025] [:error] [pid 14168:tid 14172] [client 40.70.219.96:24553] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-cron.php"] [unique_id "aSS8NvR-ZDU0QEgAIItTDgAAAME"]
[Tue Nov 25 04:12:41.708245 2025] [:error] [pid 14076:tid 14086] [client 40.70.219.96:24398] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Tue Nov 25 04:12:41.922238 2025] [:error] [pid 14076:tid 14089] [client 40.70.219.96:24398] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Nov 25 04:12:42.135983 2025] [:error] [pid 14076:tid 14103] [client 40.70.219.96:24398] File does not exist: /usr/local/apache/htdocs/suspended-page/cloud.php
[Tue Nov 25 04:12:42.359041 2025] [:error] [pid 14076:tid 14090] [client 40.70.219.96:24398] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Nov 25 04:12:42.577114 2025] [:error] [pid 14076:tid 14094] [client 40.70.219.96:24398] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Tue Nov 25 04:12:42.789767 2025] [:error] [pid 14076:tid 14082] [client 40.70.219.96:24398] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Tue Nov 25 04:12:43.002383 2025] [:error] [pid 14076:tid 14091] [client 40.70.219.96:24398] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Tue Nov 25 04:12:43.241193 2025] [:error] [pid 14076:tid 14096] [client 40.70.219.96:24398] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue Nov 25 04:12:43.463346 2025] [:error] [pid 14076:tid 14083] [client 40.70.219.96:24398] File does not exist: /usr/local/apache/htdocs/suspended-page/text.php
[Tue Nov 25 04:12:43.721349 2025] [:error] [pid 14076:tid 14105] [client 40.70.219.96:24398] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Nov 25 04:12:43.948051 2025] [:error] [pid 14076:tid 14101] [client 40.70.219.96:24398] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Tue Nov 25 04:12:44.176397 2025] [:error] [pid 14076:tid 14102] [client 40.70.219.96:24398] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/link.php"] [unique_id "aSS8PHsB4Gz6Qw-pvBv6EwAAABU"]
[Tue Nov 25 04:12:49.887207 2025] [:error] [pid 14688:tid 14699] [client 40.70.219.96:24546] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/link.php"] [unique_id "aSS8QW9vYrBoEsiDnizLwgAAAQk"]
[Tue Nov 25 04:12:54.400670 2025] [:error] [pid 14077:tid 14127] [client 40.70.219.96:24552] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/link.php"] [unique_id "aSS8RhG9n7UHEkwDTyg-FQAAAFE"]
[Tue Nov 25 04:13:01.793774 2025] [:error] [pid 14168:tid 14182] [client 40.70.219.96:24392] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/makeasmtp.php"] [unique_id "aSS8TfR-ZDU0QEgAIItTFwAAAMs"]
[Tue Nov 25 04:13:05.682494 2025] [:error] [pid 14076:tid 14088] [client 40.70.219.96:24510] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/makeasmtp.php"] [unique_id "aSS8UXsB4Gz6Qw-pvBv6JAAAAAc"]
[Tue Nov 25 04:13:07.770032 2025] [:error] [pid 14076:tid 14089] [client 40.70.219.96:24571] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/makeasmtp.php"] [unique_id "aSS8U3sB4Gz6Qw-pvBv6JgAAAAg"]
[Tue Nov 25 04:13:09.065312 2025] [:error] [pid 14077:tid 14118] [client 40.70.219.96:24558] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/makeasmtp.php"] [unique_id "aSS8VRG9n7UHEkwDTyg-HgAAAEg"]
[Tue Nov 25 04:13:11.095137 2025] [:error] [pid 14168:tid 14184] [client 40.70.219.96:24501] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSS8V_R-ZDU0QEgAIItTHAAAAM0"]
[Tue Nov 25 04:13:12.643749 2025] [:error] [pid 14688:tid 14710] [client 40.70.219.96:24463] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSS8WG9vYrBoEsiDnizL0wAAARQ"]
[Tue Nov 25 04:13:14.689211 2025] [:error] [pid 14168:tid 14183] [client 40.70.219.96:24408] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSS8WvR-ZDU0QEgAIItTIAAAAMw"]
[Tue Nov 25 04:13:16.430990 2025] [:error] [pid 14077:tid 14111] [client 40.70.219.96:24529] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSS8XBG9n7UHEkwDTyg-JAAAAEE"]
[Tue Nov 25 04:13:17.717072 2025] [:error] [pid 14077:tid 14120] [client 40.70.219.96:24515] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/file.php"] [unique_id "aSS8XRG9n7UHEkwDTyg-JQAAAEo"]
[Tue Nov 25 04:13:19.886959 2025] [:error] [pid 14078:tid 14160] [client 40.70.219.96:24451] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/file.php"] [unique_id "aSS8X9VXYbb0ii_rVoI2NwAAAJc"]
[Tue Nov 25 04:13:22.198989 2025] [:error] [pid 14076:tid 14097] [client 40.70.219.96:24455] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/file.php"] [unique_id "aSS8YnsB4Gz6Qw-pvBv6KAAAABA"]
[Tue Nov 25 04:13:24.097063 2025] [:error] [pid 14688:tid 14706] [client 40.70.219.96:24478] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/file.php"] [unique_id "aSS8ZG9vYrBoEsiDnizL2QAAARA"]
[Tue Nov 25 04:13:26.676511 2025] [:error] [pid 14168:tid 14176] [client 40.70.219.96:24402] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test.php"] [unique_id "aSS8ZvR-ZDU0QEgAIItTLAAAAMU"]
[Tue Nov 25 04:13:28.762592 2025] [:error] [pid 14076:tid 14105] [client 40.70.219.96:24484] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test.php"] [unique_id "aSS8aHsB4Gz6Qw-pvBv6LQAAABg"]
[Tue Nov 25 04:13:30.750026 2025] [:error] [pid 14688:tid 14702] [client 40.70.219.96:24570] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test.php"] [unique_id "aSS8am9vYrBoEsiDnizL4QAAAQw"]
[Tue Nov 25 04:13:32.762435 2025] [:error] [pid 14076:tid 14092] [client 40.70.219.96:24412] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test.php"] [unique_id "aSS8bHsB4Gz6Qw-pvBv6MAAAAAs"]
[Tue Nov 25 04:13:35.868379 2025] [:error] [pid 14168:tid 14187] [client 40.70.219.96:24526] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/chosen.php"] [unique_id "aSS8b_R-ZDU0QEgAIItTLgAAANA"]
[Tue Nov 25 04:13:38.195019 2025] [:error] [pid 14077:tid 14112] [client 40.70.219.96:24486] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/chosen.php"] [unique_id "aSS8chG9n7UHEkwDTyg-LQAAAEI"]
[Tue Nov 25 04:13:39.174534 2025] [:error] [pid 14076:tid 14099] [client 40.70.219.96:24535] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/chosen.php"] [unique_id "aSS8c3sB4Gz6Qw-pvBv6PwAAABI"]
[Tue Nov 25 04:13:41.320495 2025] [:error] [pid 14168:tid 14189] [client 40.70.219.96:24334] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/chosen.php"] [unique_id "aSS8dfR-ZDU0QEgAIItTNwAAANI"]
[Tue Nov 25 04:13:42.328154 2025] [:error] [pid 14077:tid 14124] [client 40.70.219.96:24560] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/files/css_compare.php"] [unique_id "aSS8dhG9n7UHEkwDTyg-NAAAAE4"]
[Tue Nov 25 04:13:43.695429 2025] [:error] [pid 14078:tid 14158] [client 40.70.219.96:24573] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Nov 25 04:13:43.900284 2025] [:error] [pid 14078:tid 14140] [client 40.70.219.96:24573] File does not exist: /usr/local/apache/htdocs/suspended-page/uana.php
[Tue Nov 25 04:13:44.110203 2025] [:error] [pid 14078:tid 14150] [client 40.70.219.96:24573] File does not exist: /usr/local/apache/htdocs/suspended-page/duck.php
[Tue Nov 25 04:13:44.315868 2025] [:error] [pid 14078:tid 14161] [client 40.70.219.96:24573] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Nov 25 04:13:44.986859 2025] [:error] [pid 14078:tid 14157] [client 40.70.219.96:24573] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Tue Nov 25 04:13:45.194974 2025] [:error] [pid 14078:tid 14145] [client 40.70.219.96:24573] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Tue Nov 25 04:13:45.615909 2025] [:error] [pid 14078:tid 14152] [client 40.70.219.96:24573] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Tue Nov 25 04:13:45.864924 2025] [:error] [pid 14078:tid 14156] [client 40.70.219.96:24573] File does not exist: /usr/local/apache/htdocs/suspended-page/siteheads.php
[Tue Nov 25 04:13:46.096043 2025] [:error] [pid 14078:tid 14147] [client 40.70.219.96:24573] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Nov 25 04:13:46.334361 2025] [:error] [pid 14078:tid 14142] [client 40.70.219.96:24573] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Nov 25 04:13:46.660377 2025] [:error] [pid 14078:tid 14137] [client 40.70.219.96:24573] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aSS8etVXYbb0ii_rVoI2UAAAAIA"]
[Tue Nov 25 04:13:47.629738 2025] [:error] [pid 14168:tid 14189] [client 40.70.219.96:24557] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aSS8e_R-ZDU0QEgAIItTRgAAANI"]
[Tue Nov 25 04:13:49.258679 2025] [:error] [pid 14076:tid 14104] [client 40.70.219.96:24458] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aSS8fXsB4Gz6Qw-pvBv6SAAAABc"]
[Tue Nov 25 04:13:50.006107 2025] [:error] [pid 14688:tid 14699] [client 40.70.219.96:24496] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aSS8fm9vYrBoEsiDnizL9gAAAQk"]
[Tue Nov 25 04:13:51.133324 2025] [:error] [pid 14168:tid 14175] [client 40.70.219.96:24385] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/moon.php"] [unique_id "aSS8f_R-ZDU0QEgAIItTVgAAAMQ"]
[Tue Nov 25 04:13:52.479517 2025] [:error] [pid 14077:tid 14123] [client 40.70.219.96:24498] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/moon.php"] [unique_id "aSS8gBG9n7UHEkwDTyg-OwAAAE0"]
[Tue Nov 25 04:13:53.667505 2025] [:error] [pid 14077:tid 14134] [client 40.70.219.96:24483] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/moon.php"] [unique_id "aSS8gRG9n7UHEkwDTyg-PQAAAFg"]
[Tue Nov 25 04:13:54.636136 2025] [:error] [pid 14168:tid 14177] [client 40.70.219.96:24506] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/moon.php"] [unique_id "aSS8gvR-ZDU0QEgAIItTWQAAAMY"]
[Tue Nov 25 04:13:56.677267 2025] [:error] [pid 14077:tid 14121] [client 40.70.219.96:24566] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-info.php"] [unique_id "aSS8hBG9n7UHEkwDTyg-QAAAAEs"]
[Tue Nov 25 04:13:57.654515 2025] [:error] [pid 14077:tid 14125] [client 40.70.219.96:24505] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-info.php"] [unique_id "aSS8hRG9n7UHEkwDTyg-RAAAAE8"]
[Tue Nov 25 04:13:58.889826 2025] [:error] [pid 14078:tid 14142] [client 40.70.219.96:24457] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-info.php"] [unique_id "aSS8htVXYbb0ii_rVoI2WwAAAIU"]
[Tue Nov 25 04:14:00.356711 2025] [:error] [pid 14688:tid 14694] [client 40.70.219.96:24518] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-info.php"] [unique_id "aSS8iG9vYrBoEsiDnizMCAAAAQQ"]
[Tue Nov 25 04:14:01.822107 2025] [:error] [pid 14077:tid 14134] [client 40.70.219.96:24527] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/warm.PhP7"] [unique_id "aSS8iRG9n7UHEkwDTyg-SgAAAFg"]
[Tue Nov 25 04:14:02.518343 2025] [:error] [pid 14688:tid 14709] [client 40.70.219.96:24542] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/warm.PhP7"] [unique_id "aSS8im9vYrBoEsiDnizMDQAAARM"]
[Tue Nov 25 04:14:03.414923 2025] [:error] [pid 14168:tid 14178] [client 40.70.219.96:24549] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/warm.PhP7"] [unique_id "aSS8i_R-ZDU0QEgAIItTZwAAAMc"]
[Tue Nov 25 04:14:04.714564 2025] [:error] [pid 14078:tid 14146] [client 40.70.219.96:24471] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/warm.PhP7"] [unique_id "aSS8jNVXYbb0ii_rVoI2YwAAAIk"]
[Tue Nov 25 04:14:05.912196 2025] [:error] [pid 14078:tid 14141] [client 40.70.219.96:24574] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ws.php7"] [unique_id "aSS8jdVXYbb0ii_rVoI2ZgAAAIQ"]
[Tue Nov 25 04:14:07.657683 2025] [:error] [pid 14688:tid 14713] [client 40.70.219.96:24497] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ws.php7"] [unique_id "aSS8j29vYrBoEsiDnizMHgAAARc"]
[Tue Nov 25 04:14:08.689250 2025] [:error] [pid 14077:tid 14111] [client 40.70.219.96:24531] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ws.php7"] [unique_id "aSS8kBG9n7UHEkwDTyg-TwAAAEE"]
[Tue Nov 25 04:14:10.154633 2025] [:error] [pid 14078:tid 14161] [client 40.70.219.96:24482] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ws.php7"] [unique_id "aSS8ktVXYbb0ii_rVoI2cgAAAJg"]
[Tue Nov 25 04:14:12.423358 2025] [:error] [pid 14076:tid 14084] [client 40.70.219.96:24550] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/rss.php"] [unique_id "aSS8lHsB4Gz6Qw-pvBv6dQAAAAM"]
[Tue Nov 25 04:14:15.139593 2025] [:error] [pid 14078:tid 14142] [client 40.70.219.96:24555] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/rss.php"] [unique_id "aSS8l9VXYbb0ii_rVoI2dwAAAIU"]
[Tue Nov 25 04:14:17.808708 2025] [:error] [pid 14076:tid 14101] [client 40.70.219.96:24508] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/rss.php"] [unique_id "aSS8mXsB4Gz6Qw-pvBv6fQAAABQ"]
[Tue Nov 25 04:14:20.218325 2025] [:error] [pid 14168:tid 14181] [client 40.70.219.96:24403] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/rss.php"] [unique_id "aSS8nPR-ZDU0QEgAIItTjgAAAMo"]
[Tue Nov 25 04:14:22.190713 2025] [:error] [pid 14077:tid 14118] [client 40.70.219.96:24504] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/pekok.php"] [unique_id "aSS8nhG9n7UHEkwDTyg-WgAAAEg"]
[Tue Nov 25 04:14:24.728713 2025] [:error] [pid 14078:tid 14142] [client 40.70.219.96:24409] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/pekok.php"] [unique_id "aSS8oNVXYbb0ii_rVoI2fwAAAIU"]
[Tue Nov 25 04:14:26.406773 2025] [:error] [pid 14076:tid 14101] [client 40.70.219.96:24565] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/pekok.php"] [unique_id "aSS8onsB4Gz6Qw-pvBv6swAAABQ"]
[Tue Nov 25 04:14:27.042364 2025] [:error] [pid 14688:tid 14700] [client 40.70.219.96:24492] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/pekok.php"] [unique_id "aSS8o29vYrBoEsiDnizMMwAAAQo"]
[Tue Nov 25 04:14:28.076640 2025] [:error] [pid 14077:tid 14131] [client 40.70.219.96:24393] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/elp.php"] [unique_id "aSS8pBG9n7UHEkwDTyg-XQAAAFU"]
[Tue Nov 25 04:14:30.712620 2025] [:error] [pid 14078:tid 14155] [client 40.70.219.96:24469] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/elp.php"] [unique_id "aSS8ptVXYbb0ii_rVoI2hAAAAJI"]
[Tue Nov 25 04:14:32.539229 2025] [:error] [pid 14688:tid 14692] [client 40.70.219.96:24519] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/elp.php"] [unique_id "aSS8qG9vYrBoEsiDnizMNwAAAQI"]
[Tue Nov 25 04:14:34.819185 2025] [:error] [pid 14168:tid 14191] [client 40.70.219.96:24545] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/elp.php"] [unique_id "aSS8qvR-ZDU0QEgAIItTrgAAANQ"]
[Tue Nov 25 04:14:36.528796 2025] [:error] [pid 14168:tid 14187] [client 40.70.219.96:24394] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-aa.php"] [unique_id "aSS8rPR-ZDU0QEgAIItTtAAAANA"]
[Tue Nov 25 04:14:39.639729 2025] [:error] [pid 14076:tid 14085] [client 40.70.219.96:24388] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-aa.php"] [unique_id "aSS8r3sB4Gz6Qw-pvBv6vgAAAAQ"]
[Tue Nov 25 04:14:46.818331 2025] [:error] [pid 14168:tid 14180] [client 40.70.219.96:24564] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aa.php
[Tue Nov 25 04:14:47.045209 2025] [:error] [pid 14168:tid 14179] [client 40.70.219.96:24564] File does not exist: /usr/local/apache/htdocs/suspended-page/cart.php
[Tue Nov 25 04:14:47.254665 2025] [:error] [pid 14168:tid 14181] [client 40.70.219.96:24564] File does not exist: /usr/local/apache/htdocs/suspended-page/categories.php
[Tue Nov 25 04:14:47.478352 2025] [:error] [pid 14168:tid 14178] [client 40.70.219.96:24564] File does not exist: /usr/local/apache/htdocs/suspended-page/compare.php
[Tue Nov 25 04:14:47.723563 2025] [:error] [pid 14168:tid 14191] [client 40.70.219.96:24564] File does not exist: /usr/local/apache/htdocs/suspended-page/refund.php
[Tue Nov 25 04:14:48.294086 2025] [:error] [pid 14168:tid 14184] [client 40.70.219.96:24564] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Tue Nov 25 04:14:49.844303 2025] [:error] [pid 14168:tid 14184] [client 40.70.219.96:24564] File does not exist: /usr/local/apache/htdocs/suspended-page/wishlist.php
[Tue Nov 25 04:14:50.057520 2025] [:error] [pid 14168:tid 14195] [client 40.70.219.96:24564] File does not exist: /usr/local/apache/htdocs/suspended-page/results.php
[Tue Nov 25 04:14:50.311524 2025] [:error] [pid 14168:tid 14190] [client 40.70.219.96:24564] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Tue Nov 25 04:14:50.531313 2025] [:error] [pid 14168:tid 14185] [client 40.70.219.96:24564] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Tue Nov 25 04:14:50.945494 2025] [:error] [pid 14168:tid 14182] [client 40.70.219.96:24564] File does not exist: /usr/local/apache/htdocs/suspended-page/atom.php
[Tue Nov 25 04:14:51.162328 2025] [:error] [pid 14168:tid 14180] [client 40.70.219.96:24564] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/case.php"] [unique_id "aSS8u_R-ZDU0QEgAIItT0AAAAMk"]
[Tue Nov 25 04:14:52.834291 2025] [:error] [pid 14168:tid 14173] [client 40.70.219.96:24481] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/case.php"] [unique_id "aSS8vPR-ZDU0QEgAIItT0QAAAMI"]
[Tue Nov 25 04:14:54.700583 2025] [:error] [pid 14168:tid 14171] [client 40.70.219.96:24500] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/case.php"] [unique_id "aSS8vvR-ZDU0QEgAIItT0wAAAMA"]
[Tue Nov 25 04:14:57.728323 2025] [:error] [pid 14168:tid 14182] [client 40.70.219.96:24324] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/case.php"] [unique_id "aSS8wfR-ZDU0QEgAIItT1wAAAMs"]
[Tue Nov 25 04:14:59.633784 2025] [:error] [pid 14076:tid 14092] [client 40.70.219.96:24472] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/docs.php"] [unique_id "aSS8w3sB4Gz6Qw-pvBv6zQAAAAs"]
[Tue Nov 25 04:15:02.350092 2025] [:error] [pid 14078:tid 14150] [client 40.70.219.96:24347] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/docs.php"] [unique_id "aSS8xtVXYbb0ii_rVoI2mwAAAI0"]
[Tue Nov 25 04:15:04.707979 2025] [:error] [pid 14077:tid 14129] [client 40.70.219.96:24537] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/docs.php"] [unique_id "aSS8yBG9n7UHEkwDTyg-dAAAAFM"]
[Tue Nov 25 04:15:07.019463 2025] [:error] [pid 14168:tid 14184] [client 40.70.219.96:24507] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/docs.php"] [unique_id "aSS8y_R-ZDU0QEgAIItT3gAAAM0"]
[Tue Nov 25 04:15:14.898761 2025] [:error] [pid 14077:tid 14118] [client 40.70.219.96:24462] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ios.php"] [unique_id "aSS80hG9n7UHEkwDTyg-fAAAAEg"]
[Tue Nov 25 04:15:17.499342 2025] [:error] [pid 14168:tid 14189] [client 40.70.219.96:24561] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ios.php"] [unique_id "aSS81fR-ZDU0QEgAIItT6AAAANI"]
[Tue Nov 25 04:15:20.274057 2025] [:error] [pid 14168:tid 14194] [client 40.70.219.96:24405] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ios.php"] [unique_id "aSS82PR-ZDU0QEgAIItT8wAAANc"]
[Tue Nov 25 04:15:21.591644 2025] [:error] [pid 14076:tid 14103] [client 40.70.219.96:24453] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ios.php"] [unique_id "aSS82XsB4Gz6Qw-pvBv64AAAABY"]
[Tue Nov 25 04:15:23.785755 2025] [:error] [pid 14688:tid 14701] [client 40.70.219.96:24477] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/click.php"] [unique_id "aSS8229vYrBoEsiDnizMaQAAAQs"]
[Tue Nov 25 04:15:25.084492 2025] [:error] [pid 14077:tid 14121] [client 40.70.219.96:24541] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/click.php"] [unique_id "aSS83RG9n7UHEkwDTyg-gQAAAEs"]
[Tue Nov 25 04:15:28.167789 2025] [:error] [pid 14078:tid 14159] [client 40.70.219.96:24453] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/click.php"] [unique_id "aSS84NVXYbb0ii_rVoI2twAAAJY"]
[Tue Nov 25 04:15:29.692605 2025] [:error] [pid 14168:tid 14188] [client 40.70.219.96:24572] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/click.php"] [unique_id "aSS84fR-ZDU0QEgAIItUAgAAANE"]
[Tue Nov 25 04:15:31.830511 2025] [:error] [pid 14168:tid 14171] [client 40.70.219.96:24563] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/lv.php"] [unique_id "aSS84_R-ZDU0QEgAIItUBQAAAMA"]
[Tue Nov 25 04:15:33.650865 2025] [:error] [pid 14078:tid 14138] [client 40.70.219.96:24567] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/lv.php"] [unique_id "aSS85dVXYbb0ii_rVoI2vwAAAIE"]
[Tue Nov 25 04:15:35.644602 2025] [:error] [pid 14076:tid 14098] [client 40.70.219.96:24323] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/lv.php"] [unique_id "aSS853sB4Gz6Qw-pvBv64gAAABE"]
[Tue Nov 25 04:15:37.647901 2025] [:error] [pid 14168:tid 14172] [client 40.70.219.96:24490] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/lv.php"] [unique_id "aSS86fR-ZDU0QEgAIItUDwAAAME"]
[Tue Nov 25 04:15:38.889355 2025] [:error] [pid 14078:tid 14142] [client 40.70.219.96:24568] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/inputs.php"] [unique_id "aSS86tVXYbb0ii_rVoI2xAAAAIU"]
[Tue Nov 25 04:15:39.942037 2025] [:error] [pid 14688:tid 14711] [client 40.70.219.96:24502] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/inputs.php"] [unique_id "aSS8629vYrBoEsiDnizMcgAAARU"]
[Tue Nov 25 04:15:41.007786 2025] [:error] [pid 14168:tid 14178] [client 40.70.219.96:24258] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/inputs.php"] [unique_id "aSS87fR-ZDU0QEgAIItUFwAAAMc"]
[Tue Nov 25 04:15:43.351785 2025] [:error] [pid 14688:tid 14695] [client 40.70.219.96:24397] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/inputs.php"] [unique_id "aSS8729vYrBoEsiDnizMdQAAAQU"]
[Tue Nov 25 04:15:44.990764 2025] [:error] [pid 14076:tid 14083] [client 40.70.219.96:24391] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/alfa.php"] [unique_id "aSS88HsB4Gz6Qw-pvBv66wAAAAI"]
[Tue Nov 25 04:15:46.898962 2025] [:error] [pid 14078:tid 14144] [client 40.70.219.96:24442] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/alfa.php"] [unique_id "aSS88tVXYbb0ii_rVoI2ywAAAIc"]
[Tue Nov 25 04:15:49.068738 2025] [:error] [pid 14078:tid 14138] [client 40.70.219.96:24476] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/alfa.php"] [unique_id "aSS89dVXYbb0ii_rVoI20gAAAIE"]
[Tue Nov 25 04:15:51.565154 2025] [:error] [pid 14168:tid 14195] [client 40.70.219.96:24509] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Nov 25 04:15:51.775532 2025] [:error] [pid 14168:tid 14180] [client 40.70.219.96:24509] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Tue Nov 25 04:15:51.987857 2025] [:error] [pid 14168:tid 14192] [client 40.70.219.96:24509] File does not exist: /usr/local/apache/htdocs/suspended-page/goat1.php
[Tue Nov 25 04:15:52.194449 2025] [:error] [pid 14168:tid 14187] [client 40.70.219.96:24509] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Tue Nov 25 04:15:52.435968 2025] [:error] [pid 14168:tid 14182] [client 40.70.219.96:24509] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Tue Nov 25 04:15:52.642670 2025] [:error] [pid 14168:tid 14179] [client 40.70.219.96:24509] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Tue Nov 25 04:15:52.863920 2025] [:error] [pid 14168:tid 14190] [client 40.70.219.96:24509] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Nov 25 04:15:53.432420 2025] [:error] [pid 14168:tid 14185] [client 40.70.219.96:24509] File does not exist: /usr/local/apache/htdocs/suspended-page/v.php
[Tue Nov 25 04:15:53.881431 2025] [:error] [pid 14168:tid 14177] [client 40.70.219.96:24509] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Nov 25 04:15:54.116968 2025] [:error] [pid 14168:tid 14181] [client 40.70.219.96:24509] File does not exist: /usr/local/apache/htdocs/suspended-page/vv.php
[Tue Nov 25 04:15:54.328630 2025] [:error] [pid 14168:tid 14173] [client 40.70.219.96:24509] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Tue Nov 25 04:15:54.555439 2025] [:error] [pid 14168:tid 14191] [client 40.70.219.96:24509] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/jp.php"] [unique_id "aSS8-vR-ZDU0QEgAIItUKQAAANQ"]
[Tue Nov 25 04:15:57.077355 2025] [:error] [pid 14688:tid 14701] [client 40.70.219.96:24511] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/jp.php"] [unique_id "aSS8_W9vYrBoEsiDnizMhgAAAQs"]
[Tue Nov 25 04:16:05.130149 2025] [:error] [pid 14077:tid 14126] [client 40.70.219.96:24396] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/jp.php"] [unique_id "aSS9BRG9n7UHEkwDTyg-iwAAAFA"]
[Tue Nov 25 04:16:11.377188 2025] [:error] [pid 14688:tid 14700] [client 40.70.219.96:24390] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/jp.php"] [unique_id "aSS9C29vYrBoEsiDnizMoQAAAQo"]
[Tue Nov 25 04:16:16.252489 2025] [:error] [pid 14078:tid 14154] [client 40.70.219.96:24520] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/2.php"] [unique_id "aSS9ENVXYbb0ii_rVoI24wAAAJE"]
[Tue Nov 25 04:16:18.764147 2025] [:error] [pid 14688:tid 14700] [client 40.70.219.96:24491] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/2.php"] [unique_id "aSS9Em9vYrBoEsiDnizMrgAAAQo"]
[Tue Nov 25 04:16:20.691338 2025] [:error] [pid 14688:tid 14702] [client 40.70.219.96:24554] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/2.php"] [unique_id "aSS9FG9vYrBoEsiDnizMsAAAAQw"]
[Tue Nov 25 04:16:21.626385 2025] [:error] [pid 14168:tid 14186] [client 40.70.219.96:24431] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/2.php"] [unique_id "aSS9FfR-ZDU0QEgAIItURAAAAM8"]
[Tue Nov 25 04:16:23.750477 2025] [:error] [pid 14078:tid 14158] [client 40.70.219.96:24569] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/goods.php"] [unique_id "aSS9F9VXYbb0ii_rVoI26AAAAJU"]
[Tue Nov 25 04:16:24.838386 2025] [:error] [pid 14688:tid 14691] [client 40.70.219.96:24424] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/goods.php"] [unique_id "aSS9GG9vYrBoEsiDnizMuwAAAQE"]
[Tue Nov 25 04:16:26.758793 2025] [:error] [pid 14077:tid 14113] [client 40.70.219.96:24428] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/goods.php"] [unique_id "aSS9GhG9n7UHEkwDTyg-kAAAAEM"]
[Tue Nov 25 04:16:28.253172 2025] [:error] [pid 14168:tid 14174] [client 40.70.219.96:24329] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/goods.php"] [unique_id "aSS9HPR-ZDU0QEgAIItUSgAAAMM"]
[Tue Nov 25 04:16:30.557711 2025] [:error] [pid 14076:tid 14095] [client 40.70.219.96:24532] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/manager.php"] [unique_id "aSS9HnsB4Gz6Qw-pvBv6-gAAAA4"]
[Tue Nov 25 04:16:33.229732 2025] [:error] [pid 14078:tid 14141] [client 40.70.219.96:24468] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/manager.php"] [unique_id "aSS9IdVXYbb0ii_rVoI26QAAAIQ"]
[Tue Nov 25 04:16:36.035399 2025] [:error] [pid 14077:tid 14118] [client 40.70.219.96:24423] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/manager.php"] [unique_id "aSS9JBG9n7UHEkwDTyg-qwAAAEg"]
[Tue Nov 25 04:16:37.934136 2025] [:error] [pid 14077:tid 14124] [client 40.70.219.96:24488] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/manager.php"] [unique_id "aSS9JRG9n7UHEkwDTyg-uwAAAE4"]
[Tue Nov 25 04:16:40.651378 2025] [:error] [pid 14077:tid 14122] [client 40.70.219.96:24525] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/new.php"] [unique_id "aSS9KBG9n7UHEkwDTyg-xwAAAEw"]
[Tue Nov 25 04:16:42.753826 2025] [:error] [pid 14168:tid 14193] [client 40.70.219.96:24543] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/new.php"] [unique_id "aSS9KvR-ZDU0QEgAIItUVQAAANY"]
[Tue Nov 25 04:16:48.454325 2025] [:error] [pid 14077:tid 14116] [client 40.70.219.96:24538] [client 40.70.219.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/new.php"] [unique_id "aSS9MBG9n7UHEkwDTyg-zAAAAEY"]
[Tue Nov 25 04:16:55.351365 2025] [:error] [pid 14688:tid 14692] [client 40.70.219.96:24523] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Nov 25 04:16:55.571887 2025] [:error] [pid 14688:tid 14691] [client 40.70.219.96:24523] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Nov 25 04:16:55.807149 2025] [:error] [pid 14688:tid 14702] [client 40.70.219.96:24523] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Tue Nov 25 04:16:56.020691 2025] [:error] [pid 14688:tid 14711] [client 40.70.219.96:24523] File does not exist: /usr/local/apache/htdocs/suspended-page/el.php
[Tue Nov 25 04:16:56.779796 2025] [:error] [pid 14688:tid 14710] [client 40.70.219.96:24523] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Tue Nov 25 04:16:57.860028 2025] [:error] [pid 14688:tid 14714] [client 40.70.219.96:24523] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Tue Nov 25 04:16:58.068803 2025] [:error] [pid 14688:tid 14704] [client 40.70.219.96:24523] File does not exist: /usr/local/apache/htdocs/suspended-page/conflg.php
[Tue Nov 25 04:16:58.295006 2025] [:error] [pid 14688:tid 14695] [client 40.70.219.96:24523] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Tue Nov 25 06:38:35.024008 2025] [:error] [pid 14168:tid 14171] [client 172.177.202.233:1111] File does not exist: /usr/local/apache/htdocs/suspended-page/acxx.php
[Tue Nov 25 06:38:35.233029 2025] [:error] [pid 14168:tid 14182] [client 172.177.202.233:1111] File does not exist: /usr/local/apache/htdocs/suspended-page/dev1s.php
[Tue Nov 25 06:38:35.765286 2025] [:error] [pid 14168:tid 14192] [client 172.177.202.233:1111] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Tue Nov 25 06:38:35.977678 2025] [:error] [pid 14168:tid 14174] [client 172.177.202.233:1111] File does not exist: /usr/local/apache/htdocs/suspended-page/c4.php
[Tue Nov 25 06:38:36.188942 2025] [:error] [pid 14168:tid 14178] [client 172.177.202.233:1111] File does not exist: /usr/local/apache/htdocs/suspended-page/wsx.php
[Tue Nov 25 06:38:36.412341 2025] [:error] [pid 14168:tid 14189] [client 172.177.202.233:1111] File does not exist: /usr/local/apache/htdocs/suspended-page/b4.php
[Tue Nov 25 06:38:36.645980 2025] [:error] [pid 14168:tid 14194] [client 172.177.202.233:1111] File does not exist: /usr/local/apache/htdocs/suspended-page/xenium4.php
[Tue Nov 25 06:38:36.856064 2025] [:error] [pid 14168:tid 14193] [client 172.177.202.233:1111] File does not exist: /usr/local/apache/htdocs/suspended-page/xpw.php
[Tue Nov 25 06:38:37.069331 2025] [:error] [pid 14168:tid 14186] [client 172.177.202.233:1111] File does not exist: /usr/local/apache/htdocs/suspended-page/ww2.php
[Tue Nov 25 06:38:37.289172 2025] [:error] [pid 14168:tid 14181] [client 172.177.202.233:1111] File does not exist: /usr/local/apache/htdocs/suspended-page/ww3.php
[Tue Nov 25 06:38:37.497944 2025] [:error] [pid 14168:tid 14191] [client 172.177.202.233:1111] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/v.php"] [unique_id "aSTebfR-ZDU0QEgAIIuIhAAAANQ"]
[Tue Nov 25 06:38:43.240028 2025] [:error] [pid 14078:tid 14156] [client 172.177.202.233:2703] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/v.php"] [unique_id "aSTec9VXYbb0ii_rVoJdcQAAAJM"]
[Tue Nov 25 06:38:44.673397 2025] [:error] [pid 1103:tid 1128] [client 172.177.202.233:2729] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/v.php"] [unique_id "aSTedI0LETdqOlq63sQTBQAAAVM"]
[Tue Nov 25 06:38:46.723683 2025] [:error] [pid 1103:tid 1131] [client 172.177.202.233:7416] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/v.php"] [unique_id "aSTedo0LETdqOlq63sQTCQAAAVY"]
[Tue Nov 25 06:38:50.002039 2025] [:error] [pid 14077:tid 14125] [client 172.177.202.233:1149] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/d2.php"] [unique_id "aSTeehG9n7UHEkwDTyhiWQAAAE8"]
[Tue Nov 25 06:38:51.042628 2025] [:error] [pid 14688:tid 14701] [client 172.177.202.233:9351] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/d2.php"] [unique_id "aSTee29vYrBoEsiDniz3gQAAAQs"]
[Tue Nov 25 06:38:52.615715 2025] [:error] [pid 14688:tid 14690] [client 172.177.202.233:8954] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/d2.php"] [unique_id "aSTefG9vYrBoEsiDniz3ggAAAQA"]
[Tue Nov 25 06:38:54.096651 2025] [:error] [pid 14077:tid 14132] [client 172.177.202.233:4813] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/d2.php"] [unique_id "aSTefhG9n7UHEkwDTyhiXQAAAFY"]
[Tue Nov 25 06:38:56.303270 2025] [:error] [pid 1103:tid 1133] [client 172.177.202.233:2090] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/snus.php"] [unique_id "aSTegI0LETdqOlq63sQTEQAAAVg"]
[Tue Nov 25 06:39:04.970410 2025] [:error] [pid 1103:tid 1116] [client 172.177.202.233:4809] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/snus.php"] [unique_id "aSTeiI0LETdqOlq63sQTHAAAAUc"]
[Tue Nov 25 06:39:08.568666 2025] [:error] [pid 1103:tid 1123] [client 172.177.202.233:3295] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/snus.php"] [unique_id "aSTejI0LETdqOlq63sQTHgAAAU4"]
[Tue Nov 25 06:39:10.930700 2025] [:error] [pid 14688:tid 14696] [client 172.177.202.233:7132] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/011i.php"] [unique_id "aSTejm9vYrBoEsiDniz3iwAAAQY"]
[Tue Nov 25 06:39:13.318369 2025] [:error] [pid 14078:tid 14151] [client 172.177.202.233:2988] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/011i.php"] [unique_id "aSTekdVXYbb0ii_rVoJdjAAAAI4"]
[Tue Nov 25 06:39:29.527058 2025] [:error] [pid 14078:tid 14146] [client 172.177.202.233:2629] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disaos.php"] [unique_id "aSTeodVXYbb0ii_rVoJdoAAAAIk"]
[Tue Nov 25 06:39:50.433173 2025] [:error] [pid 14078:tid 14148] [client 172.177.202.233:9005] File does not exist: /usr/local/apache/htdocs/suspended-page/gdn.php
[Tue Nov 25 06:39:50.643383 2025] [:error] [pid 14078:tid 14161] [client 172.177.202.233:9005] File does not exist: /usr/local/apache/htdocs/suspended-page/ww4.php
[Tue Nov 25 06:39:50.874240 2025] [:error] [pid 14078:tid 14150] [client 172.177.202.233:9005] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Tue Nov 25 06:39:51.084068 2025] [:error] [pid 14078:tid 14159] [client 172.177.202.233:9005] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Tue Nov 25 06:39:51.295280 2025] [:error] [pid 14078:tid 14138] [client 172.177.202.233:9005] File does not exist: /usr/local/apache/htdocs/suspended-page/nx1.php
[Tue Nov 25 06:39:51.659241 2025] [:error] [pid 14078:tid 14153] [client 172.177.202.233:9005] File does not exist: /usr/local/apache/htdocs/suspended-page/ii.php
[Tue Nov 25 06:39:51.868878 2025] [:error] [pid 14078:tid 14139] [client 172.177.202.233:9005] File does not exist: /usr/local/apache/htdocs/suspended-page/kr.php
[Tue Nov 25 06:39:52.078689 2025] [:error] [pid 14078:tid 14152] [client 172.177.202.233:9005] File does not exist: /usr/local/apache/htdocs/suspended-page/18299.php
[Tue Nov 25 06:39:52.288483 2025] [:error] [pid 14078:tid 14151] [client 172.177.202.233:9005] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Tue Nov 25 06:39:52.496447 2025] [:error] [pid 14078:tid 14160] [client 172.177.202.233:9005] File does not exist: /usr/local/apache/htdocs/suspended-page/chati.php
[Tue Nov 25 06:39:52.721724 2025] [:error] [pid 14078:tid 14143] [client 172.177.202.233:9005] File does not exist: /usr/local/apache/htdocs/suspended-page/content-over.php
[Tue Nov 25 06:39:52.952657 2025] [:error] [pid 14078:tid 14154] [client 172.177.202.233:9005] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gm.php"] [unique_id "aSTeuNVXYbb0ii_rVoJdugAAAJE"]
[Tue Nov 25 06:40:12.409038 2025] [:error] [pid 14688:tid 14698] [client 172.177.202.233:7574] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/naxc.php"] [unique_id "aSTezG9vYrBoEsiDniz3sgAAAQg"]
[Tue Nov 25 06:40:16.819096 2025] [:error] [pid 14077:tid 14110] [client 172.177.202.233:2535] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/naxc.php"] [unique_id "aSTe0BG9n7UHEkwDTyhijgAAAEA"]
[Tue Nov 25 06:40:17.606861 2025] [:error] [pid 14078:tid 14146] [client 172.177.202.233:8294] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/naxc.php"] [unique_id "aSTe0dVXYbb0ii_rVoJdxwAAAIk"]
[Tue Nov 25 06:40:19.959801 2025] [:error] [pid 14688:tid 14694] [client 172.177.202.233:4910] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/naxc.php"] [unique_id "aSTe029vYrBoEsiDniz3uAAAAQQ"]
[Tue Nov 25 06:40:21.337199 2025] [:error] [pid 14077:tid 14131] [client 172.177.202.233:3043] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/we.php"] [unique_id "aSTe1RG9n7UHEkwDTyhikAAAAFU"]
[Tue Nov 25 06:40:24.285525 2025] [:error] [pid 14078:tid 14152] [client 172.177.202.233:8458] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/we.php"] [unique_id "aSTe2NVXYbb0ii_rVoJd6QAAAI8"]
[Tue Nov 25 06:40:33.106170 2025] [:error] [pid 14168:tid 14192] [client 172.177.202.233:8148] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/we.php"] [unique_id "aSTe4fR-ZDU0QEgAIIuJOAAAANU"]
[Tue Nov 25 06:40:37.910314 2025] [:error] [pid 14077:tid 14121] [client 172.177.202.233:2541] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/size.php"] [unique_id "aSTe5RG9n7UHEkwDTyhipQAAAEs"]
[Tue Nov 25 06:40:38.894394 2025] [:error] [pid 14078:tid 14140] [client 172.177.202.233:8496] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/size.php"] [unique_id "aSTe5tVXYbb0ii_rVoJd-wAAAIM"]
[Tue Nov 25 06:40:41.619531 2025] [:error] [pid 1103:tid 1124] [client 172.177.202.233:4136] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/size.php"] [unique_id "aSTe6Y0LETdqOlq63sQTzQAAAU8"]
[Tue Nov 25 06:40:47.034996 2025] [:error] [pid 1103:tid 1128] [client 172.177.202.233:1919] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/size.php"] [unique_id "aSTe740LETdqOlq63sQT0gAAAVM"]
[Tue Nov 25 06:40:51.488445 2025] [:error] [pid 1103:tid 1111] [client 172.177.202.233:4953] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/rsjlrria.php"] [unique_id "aSTe840LETdqOlq63sQT3QAAAUI"]
[Tue Nov 25 06:40:56.747206 2025] [:error] [pid 14076:tid 14102] [client 172.177.202.233:9560] File does not exist: /usr/local/apache/htdocs/suspended-page/rsjlrria.php
[Tue Nov 25 06:40:56.959492 2025] [:error] [pid 14076:tid 14097] [client 172.177.202.233:9560] [client 172.177.202.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSTe-HsB4Gz6Qw-pvBsdLwAAABA"]
[Tue Nov 25 06:41:02.808266 2025] [:error] [pid 14688:tid 14712] [client 172.177.202.233:2020] File does not exist: /usr/local/apache/htdocs/suspended-page/gec.php
[Tue Nov 25 06:41:03.621613 2025] [:error] [pid 14688:tid 14694] [client 172.177.202.233:2020] File does not exist: /usr/local/apache/htdocs/suspended-page/nfu.php
[Tue Nov 25 06:41:04.057754 2025] [:error] [pid 14688:tid 14702] [client 172.177.202.233:2020] File does not exist: /usr/local/apache/htdocs/suspended-page/xl8.php
[Tue Nov 25 06:41:04.290284 2025] [:error] [pid 14688:tid 14706] [client 172.177.202.233:2020] File does not exist: /usr/local/apache/htdocs/suspended-page/xl6.php
[Tue Nov 25 06:41:04.501144 2025] [:error] [pid 14688:tid 14691] [client 172.177.202.233:2020] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Tue Nov 25 06:41:04.714013 2025] [:error] [pid 14688:tid 14695] [client 172.177.202.233:2020] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-706.php
[Tue Nov 25 06:41:05.210864 2025] [:error] [pid 14688:tid 14698] [client 172.177.202.233:2020] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Tue Nov 25 06:41:05.419106 2025] [:error] [pid 14688:tid 14699] [client 172.177.202.233:2020] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Nov 25 06:41:05.654514 2025] [:error] [pid 14688:tid 14696] [client 172.177.202.233:2020] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/.well-known/as.php"] [unique_id "aSTfAW9vYrBoEsiDniz4VAAAAQY"]
[Tue Nov 25 06:41:07.289517 2025] [:error] [pid 14168:tid 14193] [client 172.177.202.233:9145] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/.well-known/as.php"] [unique_id "aSTfA_R-ZDU0QEgAIIuJawAAANY"]
[Tue Nov 25 06:41:09.037632 2025] [:error] [pid 1103:tid 1124] [client 172.177.202.233:5832] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/.well-known/as.php"] [unique_id "aSTfBY0LETdqOlq63sQT5gAAAU8"]
[Tue Nov 25 06:41:11.713749 2025] [:error] [pid 14168:tid 14188] [client 172.177.202.233:6841] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/.well-known/as.php"] [unique_id "aSTfB_R-ZDU0QEgAIIuJbQAAANE"]
[Tue Nov 25 06:41:17.691935 2025] [:error] [pid 14078:tid 14137] [client 172.177.202.233:1383] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/product.php"] [unique_id "aSTfDdVXYbb0ii_rVoJeDwAAAIA"]
[Tue Nov 25 06:41:29.268153 2025] [:error] [pid 14077:tid 14134] [client 172.177.202.233:2450] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/e56.php"] [unique_id "aSTfGRG9n7UHEkwDTyhizwAAAFg"]
[Tue Nov 25 06:41:34.805457 2025] [:error] [pid 14078:tid 14149] [client 172.177.202.233:3223] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/e56.php"] [unique_id "aSTfHtVXYbb0ii_rVoJeGgAAAIw"]
[Tue Nov 25 06:41:38.913882 2025] [:error] [pid 14078:tid 14141] [client 172.177.202.233:5747] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/e56.php"] [unique_id "aSTfItVXYbb0ii_rVoJeHgAAAIQ"]
[Tue Nov 25 06:41:42.228181 2025] [:error] [pid 14168:tid 14188] [client 172.177.202.233:6059] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/e56.php"] [unique_id "aSTfJvR-ZDU0QEgAIIuJgwAAANE"]
[Tue Nov 25 06:41:43.243161 2025] [:error] [pid 14076:tid 14088] [client 172.177.202.233:5264] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-x.php"] [unique_id "aSTfJ3sB4Gz6Qw-pvBsdPwAAAAc"]
[Tue Nov 25 06:41:45.570241 2025] [:error] [pid 14688:tid 14709] [client 172.177.202.233:8833] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-x.php"] [unique_id "aSTfKW9vYrBoEsiDniz4iQAAARM"]
[Tue Nov 25 06:41:48.126367 2025] [:error] [pid 14076:tid 14089] [client 172.177.202.233:5749] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-x.php"] [unique_id "aSTfLHsB4Gz6Qw-pvBsdQgAAAAg"]
[Tue Nov 25 06:41:49.678671 2025] [:error] [pid 14077:tid 14119] [client 172.177.202.233:1819] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-x.php"] [unique_id "aSTfLRG9n7UHEkwDTyhi1gAAAEk"]
[Tue Nov 25 06:41:52.653516 2025] [:error] [pid 1103:tid 1120] [client 172.177.202.233:5984] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/css.php"] [unique_id "aSTfMI0LETdqOlq63sQUHgAAAUs"]
[Tue Nov 25 06:41:54.581683 2025] [:error] [pid 14688:tid 14697] [client 172.177.202.233:3465] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/css.php"] [unique_id "aSTfMm9vYrBoEsiDniz4lwAAAQc"]
[Tue Nov 25 06:41:55.834726 2025] [:error] [pid 1103:tid 1131] [client 172.177.202.233:5430] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/css.php"] [unique_id "aSTfM40LETdqOlq63sQUJQAAAVY"]
[Tue Nov 25 06:41:58.157506 2025] [:error] [pid 14076:tid 14090] [client 172.177.202.233:7080] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/css.php"] [unique_id "aSTfNnsB4Gz6Qw-pvBsdUAAAAAk"]
[Tue Nov 25 06:41:59.868646 2025] [:error] [pid 1103:tid 1122] [client 172.177.202.233:6159] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/11.php"] [unique_id "aSTfN40LETdqOlq63sQULAAAAU0"]
[Tue Nov 25 06:42:12.107337 2025] [:error] [pid 1103:tid 1117] [client 172.177.202.233:4997] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Tue Nov 25 06:42:12.351464 2025] [:error] [pid 1103:tid 1127] [client 172.177.202.233:4997] File does not exist: /usr/local/apache/htdocs/suspended-page/20.php
[Tue Nov 25 06:42:12.599265 2025] [:error] [pid 1103:tid 1113] [client 172.177.202.233:4997] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Nov 25 06:42:12.828325 2025] [:error] [pid 1103:tid 1123] [client 172.177.202.233:4997] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php
[Tue Nov 25 06:42:14.814933 2025] [:error] [pid 1103:tid 1123] [client 172.177.202.233:4997] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php
[Tue Nov 25 06:42:15.256872 2025] [:error] [pid 1103:tid 1114] [client 172.177.202.233:4997] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Nov 25 06:42:15.791035 2025] [:error] [pid 1103:tid 1131] [client 172.177.202.233:4997] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Tue Nov 25 06:42:16.397021 2025] [:error] [pid 1103:tid 1116] [client 172.177.202.233:4997] File does not exist: /usr/local/apache/htdocs/suspended-page/X7x.php
[Tue Nov 25 06:42:16.613746 2025] [:error] [pid 1103:tid 1132] [client 172.177.202.233:4997] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Nov 25 06:42:16.824016 2025] [:error] [pid 1103:tid 1121] [client 172.177.202.233:4997] File does not exist: /usr/local/apache/htdocs/suspended-page/r.php
[Tue Nov 25 06:42:17.029835 2025] [:error] [pid 1103:tid 1124] [client 172.177.202.233:4997] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/v4.php"] [unique_id "aSTfSY0LETdqOlq63sQUQwAAAU8"]
[Tue Nov 25 06:42:26.170856 2025] [:error] [pid 1103:tid 1131] [client 172.177.202.233:1303] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/v4.php"] [unique_id "aSTfUo0LETdqOlq63sQUUQAAAVY"]
[Tue Nov 25 06:42:39.959976 2025] [:error] [pid 14076:tid 14086] [client 172.177.202.233:6361] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-22.php"] [unique_id "aSTfX3sB4Gz6Qw-pvBsdfAAAAAU"]
[Tue Nov 25 06:42:44.100769 2025] [:error] [pid 1103:tid 1110] [client 172.177.202.233:9611] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-22.php"] [unique_id "aSTfZI0LETdqOlq63sQUagAAAUE"]
[Tue Nov 25 06:42:58.181438 2025] [:error] [pid 1103:tid 1130] [client 172.177.202.233:3727] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/makeasmtp.php"] [unique_id "aSTfco0LETdqOlq63sQUgQAAAVU"]
[Tue Nov 25 06:43:02.416947 2025] [:error] [pid 14688:tid 14712] [client 172.177.202.233:6380] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/makeasmtp.php"] [unique_id "aSTfdm9vYrBoEsiDniz45wAAARY"]
[Tue Nov 25 06:43:03.724402 2025] [:error] [pid 14077:tid 14124] [client 172.177.202.233:6461] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/makeasmtp.php"] [unique_id "aSTfdxG9n7UHEkwDTyhi_AAAAE4"]
[Tue Nov 25 06:43:04.973440 2025] [:error] [pid 14076:tid 14105] [client 172.177.202.233:6728] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/makeasmtp.php"] [unique_id "aSTfeHsB4Gz6Qw-pvBsdhAAAABg"]
[Tue Nov 25 06:43:09.354757 2025] [:error] [pid 1103:tid 1119] [client 172.177.202.233:4690] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/system_log.php"] [unique_id "aSTffY0LETdqOlq63sQUmQAAAUo"]
[Tue Nov 25 06:43:11.102420 2025] [:error] [pid 14076:tid 14100] [client 172.177.202.233:2894] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/system_log.php"] [unique_id "aSTff3sB4Gz6Qw-pvBsdigAAABM"]
[Tue Nov 25 06:43:14.217416 2025] [:error] [pid 1103:tid 1128] [client 172.177.202.233:6343] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/system_log.php"] [unique_id "aSTfgo0LETdqOlq63sQUrwAAAVM"]
[Tue Nov 25 06:43:17.570123 2025] [:error] [pid 1103:tid 1112] [client 172.177.202.233:1729] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Tue Nov 25 06:43:17.796619 2025] [:error] [pid 1103:tid 1119] [client 172.177.202.233:1729] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Tue Nov 25 06:43:18.020115 2025] [:error] [pid 1103:tid 1117] [client 172.177.202.233:1729] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Tue Nov 25 06:43:18.271015 2025] [:error] [pid 1103:tid 1127] [client 172.177.202.233:1729] File does not exist: /usr/local/apache/htdocs/suspended-page/ee.php
[Tue Nov 25 06:43:18.644029 2025] [:error] [pid 1103:tid 1128] [client 172.177.202.233:1729] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Tue Nov 25 06:43:18.862625 2025] [:error] [pid 1103:tid 1131] [client 172.177.202.233:1729] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Tue Nov 25 06:43:19.076087 2025] [:error] [pid 1103:tid 1130] [client 172.177.202.233:1729] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Tue Nov 25 06:43:19.302318 2025] [:error] [pid 1103:tid 1109] [client 172.177.202.233:1729] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Tue Nov 25 06:43:19.729818 2025] [:error] [pid 1103:tid 1133] [client 172.177.202.233:1729] File does not exist: /usr/local/apache/htdocs/suspended-page/02.php
[Tue Nov 25 06:43:20.280413 2025] [:error] [pid 1103:tid 1119] [client 172.177.202.233:1729] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Tue Nov 25 06:43:20.505006 2025] [:error] [pid 1103:tid 1117] [client 172.177.202.233:1729] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/go.php"] [unique_id "aSTfiI0LETdqOlq63sQUygAAAUg"]
[Tue Nov 25 06:43:22.709802 2025] [:error] [pid 14078:tid 14153] [client 172.177.202.233:4190] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/go.php"] [unique_id "aSTfitVXYbb0ii_rVoJeagAAAJA"]
[Tue Nov 25 06:43:24.133587 2025] [:error] [pid 14077:tid 14111] [client 172.177.202.233:3452] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/go.php"] [unique_id "aSTfjBG9n7UHEkwDTyhjBAAAAEE"]
[Tue Nov 25 06:43:26.367815 2025] [:error] [pid 1103:tid 1111] [client 172.177.202.233:3517] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/go.php"] [unique_id "aSTfjo0LETdqOlq63sQU2gAAAUI"]
[Tue Nov 25 06:43:27.781002 2025] [:error] [pid 1103:tid 1127] [client 172.177.202.233:4999] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/an.php"] [unique_id "aSTfj40LETdqOlq63sQU3gAAAVI"]
[Tue Nov 25 06:43:36.675497 2025] [:error] [pid 14168:tid 14191] [client 172.177.202.233:5768] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/an.php"] [unique_id "aSTfmPR-ZDU0QEgAIIuJ8AAAANQ"]
[Tue Nov 25 06:43:45.945145 2025] [:error] [pid 14168:tid 14182] [client 172.177.202.233:4374] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp.php"] [unique_id "aSTfofR-ZDU0QEgAIIuJ-gAAAMs"]
[Tue Nov 25 06:43:50.225754 2025] [:error] [pid 1103:tid 1116] [client 172.177.202.233:4433] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp.php"] [unique_id "aSTfpo0LETdqOlq63sQVIAAAAUc"]
[Tue Nov 25 06:43:52.956077 2025] [:error] [pid 14168:tid 14190] [client 172.177.202.233:1205] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp.php"] [unique_id "aSTfqPR-ZDU0QEgAIIuKCgAAANM"]
[Tue Nov 25 06:43:53.996283 2025] [:error] [pid 14077:tid 14131] [client 172.177.202.233:5489] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp.php"] [unique_id "aSTfqRG9n7UHEkwDTyhjGwAAAFU"]
[Tue Nov 25 06:43:58.057831 2025] [:error] [pid 14688:tid 14699] [client 172.177.202.233:2135] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin.php"] [unique_id "aSTfrm9vYrBoEsiDniz5EwAAAQk"]
[Tue Nov 25 06:44:06.056294 2025] [:error] [pid 14076:tid 14096] [client 172.177.202.233:7779] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin.php"] [unique_id "aSTftnsB4Gz6Qw-pvBsdsQAAAA8"]
[Tue Nov 25 06:44:10.973788 2025] [:error] [pid 14688:tid 14701] [client 172.177.202.233:2682] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin.php"] [unique_id "aSTfum9vYrBoEsiDniz5IQAAAQs"]
[Tue Nov 25 06:44:15.148683 2025] [:error] [pid 14168:tid 14192] [client 172.177.202.233:7761] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin.php"] [unique_id "aSTfv_R-ZDU0QEgAIIuKIwAAANU"]
[Tue Nov 25 06:44:16.900986 2025] [:error] [pid 1103:tid 1127] [client 172.177.202.233:2773] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin.php"] [unique_id "aSTfwI0LETdqOlq63sQVNAAAAVI"]
[Tue Nov 25 06:44:18.627513 2025] [:error] [pid 1103:tid 1119] [client 172.177.202.233:9405] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/admin.php"] [unique_id "aSTfwo0LETdqOlq63sQVOgAAAUo"]
[Tue Nov 25 06:44:20.223347 2025] [:error] [pid 14077:tid 14117] [client 172.177.202.233:8593] [client 172.177.202.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSTfxBG9n7UHEkwDTyhjIQAAAEc"]
[Tue Nov 25 06:44:21.955970 2025] [:error] [pid 1103:tid 1133] [client 172.177.202.233:3292] [client 172.177.202.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSTfxY0LETdqOlq63sQVPgAAAVg"]
[Tue Nov 25 06:44:31.617270 2025] [:error] [pid 1103:tid 1124] [client 172.177.202.233:9356] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Tue Nov 25 06:44:31.848712 2025] [:error] [pid 1103:tid 1132] [client 172.177.202.233:9356] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Tue Nov 25 06:44:32.314219 2025] [:error] [pid 1103:tid 1129] [client 172.177.202.233:9356] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Nov 25 06:44:34.475379 2025] [:error] [pid 1103:tid 1129] [client 172.177.202.233:9356] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Tue Nov 25 06:44:34.708392 2025] [:error] [pid 1103:tid 1110] [client 172.177.202.233:9356] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Nov 25 06:44:36.324566 2025] [:error] [pid 1103:tid 1127] [client 172.177.202.233:9356] [client 172.177.202.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSTf1I0LETdqOlq63sQVTwAAAVI"]
[Tue Nov 25 06:44:40.291020 2025] [:error] [pid 14076:tid 14100] [client 172.177.202.233:2061] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue Nov 25 06:44:40.517992 2025] [:error] [pid 14076:tid 14104] [client 172.177.202.233:2061] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Tue Nov 25 06:44:40.760002 2025] [:error] [pid 14076:tid 14099] [client 172.177.202.233:2061] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSTf2HsB4Gz6Qw-pvBsdzQAAABI"]
[Tue Nov 25 06:44:44.372992 2025] [:error] [pid 14168:tid 14188] [client 172.177.202.233:7007] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSTf3PR-ZDU0QEgAIIuKOQAAANE"]
[Tue Nov 25 06:44:51.054652 2025] [:error] [pid 14688:tid 14703] [client 172.177.202.233:5343] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSTf429vYrBoEsiDniz5PwAAAQ0"]
[Tue Nov 25 06:44:52.445333 2025] [:error] [pid 1103:tid 1113] [client 172.177.202.233:4230] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSTf5I0LETdqOlq63sQVXgAAAUQ"]
[Tue Nov 25 06:45:22.368080 2025] [:error] [pid 1103:tid 1118] [client 172.177.202.233:6652] [client 172.177.202.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSTgAo0LETdqOlq63sQVnwAAAUk"]
[Tue Nov 25 06:45:36.420410 2025] [:error] [pid 1103:tid 1110] [client 172.177.202.233:3192] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/403.php"] [unique_id "aSTgEI0LETdqOlq63sQVvwAAAUE"]
[Tue Nov 25 06:45:38.409827 2025] [:error] [pid 14077:tid 14128] [client 172.177.202.233:6996] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-content/403.php"] [unique_id "aSTgEhG9n7UHEkwDTyhjUAAAAFI"]
[Tue Nov 25 06:45:41.540456 2025] [:error] [pid 1103:tid 1122] [client 172.177.202.233:6602] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Nov 25 06:45:41.754150 2025] [:error] [pid 1103:tid 1125] [client 172.177.202.233:6602] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Tue Nov 25 06:45:42.219237 2025] [:error] [pid 1103:tid 1116] [client 172.177.202.233:6602] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Nov 25 06:45:42.435410 2025] [:error] [pid 1103:tid 1110] [client 172.177.202.233:6602] File does not exist: /usr/local/apache/htdocs/suspended-page/goat1.php
[Tue Nov 25 06:45:42.650251 2025] [:error] [pid 1103:tid 1115] [client 172.177.202.233:6602] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Nov 25 06:45:42.883814 2025] [:error] [pid 1103:tid 1113] [client 172.177.202.233:6602] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Tue Nov 25 06:45:43.142729 2025] [:error] [pid 1103:tid 1121] [client 172.177.202.233:6602] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php
[Tue Nov 25 06:45:43.526377 2025] [:error] [pid 1103:tid 1114] [client 172.177.202.233:6602] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Tue Nov 25 06:45:43.767706 2025] [:error] [pid 1103:tid 1133] [client 172.177.202.233:6602] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Tue Nov 25 06:45:44.002100 2025] [:error] [pid 1103:tid 1117] [client 172.177.202.233:6602] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-2019.php"] [unique_id "aSTgGI0LETdqOlq63sQV1QAAAUg"]
[Tue Nov 25 06:45:45.509754 2025] [:error] [pid 14077:tid 14114] [client 172.177.202.233:4402] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-2019.php"] [unique_id "aSTgGRG9n7UHEkwDTyhjVQAAAEQ"]
[Tue Nov 25 06:45:49.139487 2025] [:error] [pid 14168:tid 14182] [client 172.177.202.233:4119] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-2019.php"] [unique_id "aSTgHfR-ZDU0QEgAIIuKjAAAAMs"]
[Tue Nov 25 06:45:49.927891 2025] [:error] [pid 14168:tid 14178] [client 172.177.202.233:2409] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-2019.php"] [unique_id "aSTgHfR-ZDU0QEgAIIuKkgAAAMc"]
[Tue Nov 25 06:45:54.511748 2025] [:error] [pid 1103:tid 1114] [client 172.177.202.233:9486] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bypass.php"] [unique_id "aSTgIo0LETdqOlq63sQV4gAAAUU"]
[Tue Nov 25 06:45:56.111697 2025] [:error] [pid 14168:tid 14192] [client 172.177.202.233:6065] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bypass.php"] [unique_id "aSTgJPR-ZDU0QEgAIIuKoAAAANU"]
[Tue Nov 25 06:45:57.279080 2025] [:error] [pid 14078:tid 14157] [client 172.177.202.233:8616] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bypass.php"] [unique_id "aSTgJdVXYbb0ii_rVoJe5gAAAJQ"]
[Tue Nov 25 06:45:58.831668 2025] [:error] [pid 14688:tid 14694] [client 172.177.202.233:1043] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bypass.php"] [unique_id "aSTgJm9vYrBoEsiDniz5eAAAAQQ"]
[Tue Nov 25 06:46:01.519767 2025] [:error] [pid 1103:tid 1115] [client 172.177.202.233:8427] [client 172.177.202.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSTgKY0LETdqOlq63sQV7QAAAUY"]
[Tue Nov 25 06:46:02.605130 2025] [:error] [pid 14168:tid 14192] [client 172.177.202.233:5647] [client 172.177.202.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSTgKvR-ZDU0QEgAIIuKswAAANU"]
[Tue Nov 25 06:46:12.412795 2025] [:error] [pid 14688:tid 14703] [client 172.177.202.233:8289] [client 172.177.202.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "aircraft-spruce.com.au"] [uri "/tiny.php"] [unique_id "aSTgNG9vYrBoEsiDniz5iwAAAQ0"]
[Tue Nov 25 06:46:15.790639 2025] [:error] [pid 1103:tid 1124] [client 172.177.202.233:6686] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/lock.php"] [unique_id "aSTgN40LETdqOlq63sQWBgAAAU8"]
[Tue Nov 25 06:46:19.423586 2025] [:error] [pid 1103:tid 1126] [client 172.177.202.233:9017] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/lock.php"] [unique_id "aSTgO40LETdqOlq63sQWEwAAAVE"]
[Tue Nov 25 06:46:22.443108 2025] [:error] [pid 14077:tid 14131] [client 172.177.202.233:8841] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/lock.php"] [unique_id "aSTgPhG9n7UHEkwDTyhjdgAAAFU"]
[Tue Nov 25 06:46:34.194830 2025] [:error] [pid 1103:tid 1125] [client 172.177.202.233:8884] [client 172.177.202.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/mail.php"] [unique_id "aSTgSo0LETdqOlq63sQWKAAAAVA"]
[Tue Nov 25 06:46:46.230152 2025] [:error] [pid 14168:tid 14187] [client 172.177.202.233:8975] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Nov 25 06:46:46.438626 2025] [:error] [pid 14168:tid 14186] [client 172.177.202.233:8975] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Nov 25 06:46:46.727484 2025] [:error] [pid 14168:tid 14181] [client 172.177.202.233:8975] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Tue Nov 25 06:46:47.640129 2025] [:error] [pid 14168:tid 14180] [client 172.177.202.233:8975] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Tue Nov 25 06:46:48.224874 2025] [:error] [pid 14168:tid 14192] [client 172.177.202.233:8975] [client 172.177.202.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSTgWPR-ZDU0QEgAIIuLOgAAANU"]
[Tue Nov 25 06:48:09.899009 2025] [:error] [pid 14168:tid 14179] [client 172.177.202.233:6583] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Tue Nov 25 11:09:13.017743 2025] [:error] [pid 14077:tid 14130] [client 54.173.250.15:36278] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSUd2RG9n7UHEkwDTyjEsAAAAFQ"]
[Tue Nov 25 16:06:19.963316 2025] [:error] [pid 14168:tid 14178] [client 64.227.166.115:65428] [client 64.227.166.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.166.115, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSVje_R-ZDU0QEgAIIs6jwAAAMc"]
[Tue Nov 25 16:06:19.967092 2025] [:error] [pid 14168:tid 14178] [client 64.227.166.115:65428] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 16:41:54.147796 2025] [:error] [pid 14076:tid 14089] [client 172.177.206.193:7859] [client 172.177.206.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSVr0nsB4Gz6Qw-pvBvrWQAAAAg"]
[Tue Nov 25 16:41:55.401395 2025] [:error] [pid 28609:tid 28628] [client 172.177.206.193:6778] [client 172.177.206.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSVr0yGGdT-nZJVs3x2djAAAAYo"]
[Tue Nov 25 16:41:57.452030 2025] [:error] [pid 28609:tid 28634] [client 172.177.206.193:3284] [client 172.177.206.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSVr1SGGdT-nZJVs3x2djwAAAZA"]
[Tue Nov 25 16:41:59.100379 2025] [:error] [pid 28739:tid 28783] [client 172.177.206.193:2552] [client 172.177.206.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSVr1xxGpKmlkG4FexRT_AAAAhU"]
[Tue Nov 25 16:42:04.696256 2025] [:error] [pid 28836:tid 28962] [client 172.177.206.193:5800] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Nov 25 16:42:05.868822 2025] [:error] [pid 28836:tid 28966] [client 172.177.206.193:5800] [client 172.177.206.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSVr3ZwNRsoxcLQGkTeZkQAAAss"]
[Tue Nov 25 16:42:12.230329 2025] [:error] [pid 28842:tid 29000] [client 172.177.206.193:1209] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSVr5NNmoaPf6T4-6C1X1AAAA0o"]
[Tue Nov 25 16:42:13.252632 2025] [:error] [pid 28842:tid 28992] [client 172.177.206.193:1456] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSVr5dNmoaPf6T4-6C1X1wAAA0I"]
[Tue Nov 25 16:42:17.387063 2025] [:error] [pid 14168:tid 14171] [client 172.177.206.193:1436] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSVr6fR-ZDU0QEgAIItBFQAAAMA"]
[Tue Nov 25 16:42:18.161908 2025] [:error] [pid 14077:tid 14134] [client 172.177.206.193:1451] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSVr6hG9n7UHEkwDTyhFzgAAAFg"]
[Tue Nov 25 16:42:20.813150 2025] [:error] [pid 14077:tid 14130] [client 172.177.206.193:8497] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/includes/plugins.php"] [unique_id "aSVr7BG9n7UHEkwDTyhF1QAAAFQ"]
[Tue Nov 25 16:42:25.110188 2025] [:error] [pid 14076:tid 14103] [client 172.177.206.193:1209] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/includes/plugins.php"] [unique_id "aSVr8XsB4Gz6Qw-pvBvrXgAAABY"]
[Tue Nov 25 16:42:32.481794 2025] [:error] [pid 14076:tid 14083] [client 172.177.206.193:8471] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/includes/plugins.php"] [unique_id "aSVr-HsB4Gz6Qw-pvBvrZQAAAAI"]
[Tue Nov 25 16:42:37.115356 2025] [:error] [pid 28609:tid 28625] [client 172.177.206.193:1525] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSVr_SGGdT-nZJVs3x2dpAAAAYc"]
[Tue Nov 25 16:42:38.095560 2025] [:error] [pid 14077:tid 14124] [client 172.177.206.193:6618] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSVr_hG9n7UHEkwDTyhF9gAAAE4"]
[Tue Nov 25 16:42:42.730154 2025] [:error] [pid 28740:tid 28805] [client 172.177.206.193:1615] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSVsAlppQCoYxWW6V0VL-AAAAk4"]
[Tue Nov 25 16:42:46.871987 2025] [:error] [pid 28740:tid 28809] [client 172.177.206.193:8464] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSVsBlppQCoYxWW6V0VL_wAAAlI"]
[Tue Nov 25 16:42:48.086113 2025] [:error] [pid 28609:tid 28630] [client 172.177.206.193:1533] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSVsCCGGdT-nZJVs3x2dpwAAAYw"]
[Tue Nov 25 16:42:49.859564 2025] [:error] [pid 2987:tid 2996] [client 172.177.206.193:1689] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSVsCc-djEt-pTzPxnxxsgAAAUc"]
[Tue Nov 25 16:42:52.226494 2025] [:error] [pid 28739:tid 28778] [client 172.177.206.193:6639] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSVsDBxGpKmlkG4FexRUEAAAAhA"]
[Tue Nov 25 16:42:56.510146 2025] [:error] [pid 28842:tid 28998] [client 172.177.206.193:2599] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSVsENNmoaPf6T4-6C1X7wAAA0g"]
[Tue Nov 25 16:42:58.556095 2025] [:error] [pid 2987:tid 3011] [client 172.177.206.193:1666] [client 172.177.206.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/assets/admin.php"] [unique_id "aSVsEs-djEt-pTzPxnxxuAAAAVY"]
[Tue Nov 25 16:43:01.125829 2025] [:error] [pid 14078:tid 14152] [client 172.177.206.193:2055] [client 172.177.206.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/alfa.php"] [unique_id "aSVsFdVXYbb0ii_rVoIUnAAAAI8"]
[Tue Nov 25 16:43:07.301630 2025] [:error] [pid 28740:tid 28807] [client 172.177.206.193:2101] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Nov 25 16:43:07.522361 2025] [:error] [pid 28740:tid 28799] [client 172.177.206.193:2101] [client 172.177.206.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aSVsG1ppQCoYxWW6V0VMKgAAAkg"]
[Tue Nov 25 16:43:14.236921 2025] [:error] [pid 28836:tid 28967] [client 172.177.206.193:6618] [client 172.177.206.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php"] [unique_id "aSVsIpwNRsoxcLQGkTeZrQAAAsw"]
[Tue Nov 25 18:53:12.476285 2025] [:error] [pid 14078:tid 14149] [client 138.199.60.187:53282] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/manager.php"] [unique_id "aSWKmNVXYbb0ii_rVoI37QAAAIw"]
[Tue Nov 25 18:53:12.719637 2025] [:error] [pid 28740:tid 28815] [client 138.199.60.187:53470] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/manager.php"] [unique_id "aSWKmFppQCoYxWW6V0VyigAAAlg"]
[Tue Nov 25 18:53:12.989924 2025] [:error] [pid 2987:tid 2993] [client 138.199.60.187:53664] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/manager.php"] [unique_id "aSWKmM-djEt-pTzPxnyUHQAAAUQ"]
[Tue Nov 25 18:53:13.251897 2025] [:error] [pid 28836:tid 29012] [client 138.199.60.187:53790] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/manager.php"] [unique_id "aSWKmZwNRsoxcLQGkTe3mQAAAtY"]
[Tue Nov 25 18:53:13.466374 2025] [:error] [pid 14078:tid 14157] [client 138.199.60.187:53974] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/manager.php"] [unique_id "aSWKmdVXYbb0ii_rVoI39AAAAJQ"]
[Tue Nov 25 18:53:13.733410 2025] [:error] [pid 2987:tid 3001] [client 138.199.60.187:54072] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKmc-djEt-pTzPxnyUJQAAAUw"]
[Tue Nov 25 18:53:14.008312 2025] [:error] [pid 14076:tid 14086] [client 138.199.60.187:54240] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKmnsB4Gz6Qw-pvBsKYgAAAAU"]
[Tue Nov 25 18:53:14.282809 2025] [:error] [pid 14076:tid 14081] [client 138.199.60.187:54362] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKmnsB4Gz6Qw-pvBsKZAAAAAA"]
[Tue Nov 25 18:53:14.522409 2025] [:error] [pid 28842:tid 29002] [client 138.199.60.187:54498] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKmtNmoaPf6T4-6C2DzAAAA0w"]
[Tue Nov 25 18:53:14.812001 2025] [:error] [pid 28836:tid 28967] [client 138.199.60.187:54686] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKmpwNRsoxcLQGkTe3rgAAAsw"]
[Tue Nov 25 19:19:17.359677 2025] [:error] [pid 14168:tid 14195] [client 49.36.101.150:60004] [client 49.36.101.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.101.150, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aSWQtfR-ZDU0QEgAIIti-QAAANg"]
[Tue Nov 25 19:19:17.366002 2025] [:error] [pid 14168:tid 14195] [client 49.36.101.150:60004] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 25 21:10:07.156261 2025] [:error] [pid 43981:tid 44003] [client 48.210.250.238:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/tj.php
[Tue Nov 25 21:10:07.274164 2025] [:error] [pid 43981:tid 43989] [client 48.210.250.238:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Tue Nov 25 21:10:07.392113 2025] [:error] [pid 43981:tid 43992] [client 48.210.250.238:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Tue Nov 25 21:10:07.510238 2025] [:error] [pid 43981:tid 44004] [client 48.210.250.238:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/f8moue.php
[Tue Nov 25 21:10:07.627287 2025] [:error] [pid 43981:tid 44002] [client 48.210.250.238:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/3i8som87avh59dosfymtvCakc.php
[Tue Nov 25 21:10:07.748458 2025] [:error] [pid 43981:tid 44006] [client 48.210.250.238:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/nonesoterically.php
[Tue Nov 25 21:10:07.877201 2025] [:error] [pid 43981:tid 43994] [client 48.210.250.238:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/palsy.php
[Tue Nov 25 21:10:07.993462 2025] [:error] [pid 43981:tid 43999] [client 48.210.250.238:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/vanda.php
[Tue Nov 25 21:10:08.413912 2025] [:error] [pid 43981:tid 43988] [client 48.210.250.238:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/asciferous.php
[Tue Nov 25 21:10:08.529994 2025] [:error] [pid 43981:tid 44000] [client 48.210.250.238:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/coenoecic.php
[Tue Nov 25 21:10:08.642991 2025] [:error] [pid 43981:tid 43993] [client 48.210.250.238:38602] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cyanamids.php"] [unique_id "aSWqsAgZn97m_qh_RaFcSQAAAwo"]
[Tue Nov 25 21:10:10.724474 2025] [:error] [pid 14076:tid 14091] [client 48.210.250.238:38615] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cyanamids.php"] [unique_id "aSWqsnsB4Gz6Qw-pvBs0ewAAAAo"]
[Tue Nov 25 21:10:12.143873 2025] [:error] [pid 43981:tid 44005] [client 48.210.250.238:38614] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cyanamids.php"] [unique_id "aSWqtAgZn97m_qh_RaFcSwAAAxY"]
[Tue Nov 25 21:10:15.281031 2025] [:error] [pid 28739:tid 28773] [client 48.210.250.238:38226] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cyanamids.php"] [unique_id "aSWqtxxGpKmlkG4FexSahAAAAgs"]
[Tue Nov 25 21:10:18.136647 2025] [:error] [pid 43981:tid 43996] [client 48.210.250.238:38225] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disengaging.php"] [unique_id "aSWquggZn97m_qh_RaFcUgAAAw0"]
[Tue Nov 25 21:10:19.581199 2025] [:error] [pid 28609:tid 28618] [client 48.210.250.238:38595] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disengaging.php"] [unique_id "aSWquyGGdT-nZJVs3x3gqQAAAYA"]
[Tue Nov 25 21:10:20.452075 2025] [:error] [pid 28739:tid 28784] [client 48.210.250.238:38612] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disengaging.php"] [unique_id "aSWqvBxGpKmlkG4FexSakwAAAhY"]
[Tue Nov 25 21:10:21.561969 2025] [:error] [pid 14076:tid 14082] [client 48.210.250.238:38653] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disengaging.php"] [unique_id "aSWqvXsB4Gz6Qw-pvBs0gQAAAAE"]
[Tue Nov 25 21:10:23.009565 2025] [:error] [pid 28739:tid 28782] [client 48.210.250.238:38644] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disquiet.php"] [unique_id "aSWqvxxGpKmlkG4FexSamQAAAhQ"]
[Tue Nov 25 21:10:23.976885 2025] [:error] [pid 43843:tid 43865] [client 48.210.250.238:38648] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disquiet.php"] [unique_id "aSWqvxhx4v3NUNdMKDPsMwAAAdQ"]
[Tue Nov 25 21:10:26.453811 2025] [:error] [pid 14078:tid 14161] [client 48.210.250.238:38651] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disquiet.php"] [unique_id "aSWqwtVXYbb0ii_rVoJq8wAAAJg"]
[Tue Nov 25 21:10:27.435340 2025] [:error] [pid 2987:tid 3009] [client 48.210.250.238:38632] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disquiet.php"] [unique_id "aSWqw8-djEt-pTzPxnzAwAAAAVQ"]
[Tue Nov 25 21:10:28.848094 2025] [:error] [pid 43843:tid 43851] [client 48.210.250.238:38646] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/duplicand.php"] [unique_id "aSWqxBhx4v3NUNdMKDPsOQAAAcY"]
[Tue Nov 25 21:10:30.487512 2025] [:error] [pid 43981:tid 43985] [client 48.210.250.238:38641] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/duplicand.php"] [unique_id "aSWqxggZn97m_qh_RaFcYgAAAwI"]
[Tue Nov 25 21:10:31.662049 2025] [:error] [pid 28836:tid 28966] [client 48.210.250.238:38639] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/duplicand.php"] [unique_id "aSWqx5wNRsoxcLQGkTfengAAAss"]
[Tue Nov 25 21:10:32.715711 2025] [:error] [pid 14078:tid 14141] [client 48.210.250.238:38649] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/duplicand.php"] [unique_id "aSWqyNVXYbb0ii_rVoJq-QAAAIQ"]
[Tue Nov 25 21:10:33.811043 2025] [:error] [pid 2987:tid 3011] [client 48.210.250.238:38208] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/parturiency.php"] [unique_id "aSWqyc-djEt-pTzPxnzAxwAAAVY"]
[Tue Nov 25 21:10:34.837034 2025] [:error] [pid 14076:tid 14087] [client 48.210.250.238:38340] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/parturiency.php"] [unique_id "aSWqynsB4Gz6Qw-pvBs0jwAAAAY"]
[Tue Nov 25 21:10:37.476607 2025] [:error] [pid 43843:tid 43869] [client 48.210.250.238:38215] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/parturiency.php"] [unique_id "aSWqzRhx4v3NUNdMKDPsQwAAAdg"]
[Tue Nov 25 21:10:37.934750 2025] [:error] [pid 14076:tid 14099] [client 48.210.250.238:38221] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/parturiency.php"] [unique_id "aSWqzXsB4Gz6Qw-pvBs0lQAAABI"]
[Tue Nov 25 21:10:39.024833 2025] [:error] [pid 28609:tid 28619] [client 48.210.250.238:38610] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tithings.php"] [unique_id "aSWqzyGGdT-nZJVs3x3guQAAAYE"]
[Tue Nov 25 21:10:40.397307 2025] [:error] [pid 28739:tid 28772] [client 48.210.250.238:38623] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tithings.php"] [unique_id "aSWq0BxGpKmlkG4FexSamgAAAgo"]
[Tue Nov 25 21:10:42.041353 2025] [:error] [pid 14168:tid 14189] [client 48.210.250.238:38635] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tithings.php"] [unique_id "aSWq0vR-ZDU0QEgAIIuDhwAAANI"]
[Tue Nov 25 21:10:43.071265 2025] [:error] [pid 43981:tid 43993] [client 48.210.250.238:38254] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tithings.php"] [unique_id "aSWq0wgZn97m_qh_RaFcbAAAAwo"]
[Tue Nov 25 21:10:44.079729 2025] [:error] [pid 28739:tid 28769] [client 48.210.250.238:38349] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ww5.php"] [unique_id "aSWq1BxGpKmlkG4FexSaoQAAAgc"]
[Tue Nov 25 21:10:45.169825 2025] [:error] [pid 28739:tid 28762] [client 48.210.250.238:38619] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ww5.php"] [unique_id "aSWq1RxGpKmlkG4FexSapAAAAgA"]
[Tue Nov 25 21:10:46.536315 2025] [:error] [pid 14076:tid 14101] [client 48.210.250.238:38218] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ww5.php"] [unique_id "aSWq1nsB4Gz6Qw-pvBs0rwAAABQ"]
[Tue Nov 25 21:10:47.886188 2025] [:error] [pid 43843:tid 43848] [client 48.210.250.238:38232] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ww5.php"] [unique_id "aSWq1xhx4v3NUNdMKDPsRwAAAcM"]
[Tue Nov 25 21:10:50.208560 2025] [:error] [pid 43843:tid 43845] [client 48.210.250.238:38598] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/z60.php"] [unique_id "aSWq2hhx4v3NUNdMKDPsSgAAAcA"]
[Tue Nov 25 21:10:51.738646 2025] [:error] [pid 43981:tid 43992] [client 48.210.250.238:38631] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/z60.php"] [unique_id "aSWq2wgZn97m_qh_RaFcdgAAAwk"]
[Tue Nov 25 21:10:55.328275 2025] [:error] [pid 28836:tid 28956] [client 48.210.250.238:38264] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/z60.php"] [unique_id "aSWq35wNRsoxcLQGkTfesAAAAsE"]
[Tue Nov 25 21:10:57.097811 2025] [:error] [pid 43843:tid 43855] [client 48.210.250.238:38224] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/z60.php"] [unique_id "aSWq4Rhx4v3NUNdMKDPsUAAAAco"]
[Tue Nov 25 21:10:58.863361 2025] [:error] [pid 14168:tid 14189] [client 48.210.250.238:38606] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-themes.php"] [unique_id "aSWq4vR-ZDU0QEgAIIuDkAAAANI"]
[Tue Nov 25 21:11:01.204269 2025] [:error] [pid 14078:tid 14156] [client 48.210.250.238:38627] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-themes.php"] [unique_id "aSWq5dVXYbb0ii_rVoJrFAAAAJM"]
[Tue Nov 25 21:11:04.952539 2025] [:error] [pid 14076:tid 14091] [client 48.210.250.238:38601] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-themes.php"] [unique_id "aSWq6HsB4Gz6Qw-pvBs0vgAAAAo"]
[Tue Nov 25 21:11:06.262531 2025] [:error] [pid 28609:tid 28641] [client 48.210.250.238:38603] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-themes.php"] [unique_id "aSWq6iGGdT-nZJVs3x3gzQAAAZc"]
[Tue Nov 25 21:11:08.470463 2025] [:error] [pid 14077:tid 14128] [client 48.210.250.238:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/edd.php
[Tue Nov 25 21:11:08.611266 2025] [:error] [pid 14077:tid 14120] [client 48.210.250.238:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Tue Nov 25 21:11:08.752108 2025] [:error] [pid 14077:tid 14118] [client 48.210.250.238:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/bn.php
[Tue Nov 25 21:11:09.147679 2025] [:error] [pid 14077:tid 14115] [client 48.210.250.238:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/fishmen.php
[Tue Nov 25 21:11:09.290947 2025] [:error] [pid 14077:tid 14130] [client 48.210.250.238:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/obfuscous.php
[Tue Nov 25 21:11:09.438606 2025] [:error] [pid 14077:tid 14131] [client 48.210.250.238:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/oitava.php
[Tue Nov 25 21:11:09.579393 2025] [:error] [pid 14077:tid 14116] [client 48.210.250.238:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/phrensying.php
[Tue Nov 25 21:11:09.977564 2025] [:error] [pid 14077:tid 14122] [client 48.210.250.238:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/pyrometry.php
[Tue Nov 25 21:11:10.117275 2025] [:error] [pid 14077:tid 14133] [client 48.210.250.238:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/unprecipitously.php
[Tue Nov 25 21:11:10.258521 2025] [:error] [pid 14077:tid 14126] [client 48.210.250.238:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/unbefittingly.php
[Tue Nov 25 21:11:10.651076 2025] [:error] [pid 14077:tid 14125] [client 48.210.250.238:38353] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-home.php
[Tue Nov 25 21:11:10.792585 2025] [:error] [pid 14077:tid 14132] [client 48.210.250.238:38353] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSWq7hG9n7UHEkwDTyjAQwAAAFY"]
[Tue Nov 25 21:11:12.553309 2025] [:error] [pid 43843:tid 43869] [client 48.210.250.238:38616] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSWq8Bhx4v3NUNdMKDPsXQAAAdg"]
[Tue Nov 25 21:11:15.472799 2025] [:error] [pid 14076:tid 14082] [client 48.210.250.238:38220] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSWq83sB4Gz6Qw-pvBs0yAAAAAE"]
[Tue Nov 25 21:11:16.818340 2025] [:error] [pid 14078:tid 14140] [client 48.210.250.238:38233] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSWq9NVXYbb0ii_rVoJrIQAAAIM"]
[Tue Nov 25 21:11:18.372680 2025] [:error] [pid 28609:tid 28640] [client 48.210.250.238:38605] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-ac.php"] [unique_id "aSWq9iGGdT-nZJVs3x3g1wAAAZY"]
[Tue Nov 25 21:11:19.409402 2025] [:error] [pid 43843:tid 43847] [client 48.210.250.238:38624] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-ac.php"] [unique_id "aSWq9xhx4v3NUNdMKDPsXwAAAcI"]
[Tue Nov 25 21:11:21.031982 2025] [:error] [pid 43843:tid 43868] [client 48.210.250.238:38364] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-ac.php"] [unique_id "aSWq-Rhx4v3NUNdMKDPsYAAAAdc"]
[Tue Nov 25 21:11:22.268086 2025] [:error] [pid 14076:tid 14087] [client 48.210.250.238:38630] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-ac.php"] [unique_id "aSWq-nsB4Gz6Qw-pvBs0zgAAAAY"]
[Tue Nov 25 21:11:24.124355 2025] [:error] [pid 14077:tid 14128] [client 48.210.250.238:38609] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/nof.php"] [unique_id "aSWq_BG9n7UHEkwDTyjAVgAAAFI"]
[Tue Nov 25 21:11:25.129993 2025] [:error] [pid 14077:tid 14118] [client 48.210.250.238:38628] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/nof.php"] [unique_id "aSWq_RG9n7UHEkwDTyjAWQAAAEg"]
[Tue Nov 25 21:11:27.404525 2025] [:error] [pid 28836:tid 28955] [client 48.210.250.238:38227] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/nof.php"] [unique_id "aSWq_5wNRsoxcLQGkTfe1AAAAsA"]
[Tue Nov 25 21:11:28.537024 2025] [:error] [pid 14078:tid 14141] [client 48.210.250.238:38209] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/nof.php"] [unique_id "aSWrANVXYbb0ii_rVoJrMgAAAIQ"]
[Tue Nov 25 21:11:29.863321 2025] [:error] [pid 28739:tid 28768] [client 48.210.250.238:38607] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test1.php"] [unique_id "aSWrARxGpKmlkG4FexSa0QAAAgY"]
[Tue Nov 25 21:11:31.202842 2025] [:error] [pid 14078:tid 14139] [client 48.210.250.238:38655] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test1.php"] [unique_id "aSWrA9VXYbb0ii_rVoJrNwAAAII"]
[Tue Nov 25 21:11:32.689771 2025] [:error] [pid 43981:tid 43994] [client 48.210.250.238:38212] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test1.php"] [unique_id "aSWrBAgZn97m_qh_RaFcrQAAAws"]
[Tue Nov 25 21:11:34.052210 2025] [:error] [pid 43843:tid 43865] [client 48.210.250.238:38213] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test1.php"] [unique_id "aSWrBhhx4v3NUNdMKDPsbAAAAdQ"]
[Tue Nov 25 21:11:35.093696 2025] [:error] [pid 28836:tid 29007] [client 48.210.250.238:38245] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unbalanceable.php"] [unique_id "aSWrB5wNRsoxcLQGkTfe2QAAAtE"]
[Tue Nov 25 21:11:37.932850 2025] [:error] [pid 43981:tid 43986] [client 48.210.250.238:38344] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unbalanceable.php"] [unique_id "aSWrCQgZn97m_qh_RaFcuQAAAwM"]
[Tue Nov 25 21:11:39.192391 2025] [:error] [pid 14076:tid 14087] [client 48.210.250.238:38597] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unbalanceable.php"] [unique_id "aSWrC3sB4Gz6Qw-pvBs03QAAAAY"]
[Tue Nov 25 21:11:41.492187 2025] [:error] [pid 14077:tid 14120] [client 48.210.250.238:38219] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unbalanceable.php"] [unique_id "aSWrDRG9n7UHEkwDTyjAYQAAAEo"]
[Tue Nov 25 21:11:41.996255 2025] [:error] [pid 14168:tid 14186] [client 48.210.250.238:38223] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSWrDfR-ZDU0QEgAIIuDswAAAM8"]
[Tue Nov 25 21:11:42.545784 2025] [:error] [pid 43843:tid 43845] [client 48.210.250.238:38618] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSWrDhhx4v3NUNdMKDPsdQAAAcA"]
[Tue Nov 25 21:11:43.556781 2025] [:error] [pid 28739:tid 28783] [client 48.210.250.238:38357] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSWrDxxGpKmlkG4FexSa2wAAAhU"]
[Tue Nov 25 21:11:44.779064 2025] [:error] [pid 14076:tid 14095] [client 48.210.250.238:38210] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSWrEHsB4Gz6Qw-pvBs04gAAAA4"]
[Tue Nov 25 21:11:45.656945 2025] [:error] [pid 14076:tid 14091] [client 48.210.250.238:38251] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-advaced.php"] [unique_id "aSWrEXsB4Gz6Qw-pvBs04wAAAAo"]
[Tue Nov 25 21:11:46.090880 2025] [:error] [pid 14078:tid 14145] [client 48.210.250.238:38637] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-advaced.php"] [unique_id "aSWrEtVXYbb0ii_rVoJrSwAAAIg"]
[Tue Nov 25 21:11:49.940212 2025] [:error] [pid 14078:tid 14155] [client 48.210.250.238:38348] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-advaced.php"] [unique_id "aSWrFdVXYbb0ii_rVoJrWAAAAJI"]
[Tue Nov 25 21:11:52.421815 2025] [:error] [pid 43843:tid 43845] [client 48.210.250.238:38256] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-advaced.php"] [unique_id "aSWrGBhx4v3NUNdMKDPshQAAAcA"]
[Tue Nov 25 21:11:53.999794 2025] [:error] [pid 14078:tid 14148] [client 48.210.250.238:38640] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSWrGdVXYbb0ii_rVoJrXQAAAIs"]
[Tue Nov 25 21:11:55.003299 2025] [:error] [pid 28739:tid 28785] [client 48.210.250.238:38234] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSWrGxxGpKmlkG4FexSa6QAAAhc"]
[Tue Nov 25 21:11:55.872165 2025] [:error] [pid 28739:tid 28777] [client 48.210.250.238:38229] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSWrGxxGpKmlkG4FexSa7QAAAg8"]
[Tue Nov 25 21:11:58.233254 2025] [:error] [pid 28609:tid 28622] [client 48.210.250.238:38351] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSWrHiGGdT-nZJVs3x3g-QAAAYQ"]
[Tue Nov 25 21:11:59.025418 2025] [:error] [pid 14077:tid 14122] [client 48.210.250.238:38257] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abc.php"] [unique_id "aSWrHxG9n7UHEkwDTyjAYwAAAEw"]
[Tue Nov 25 21:12:02.201339 2025] [:error] [pid 14078:tid 14149] [client 48.210.250.238:38235] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abc.php"] [unique_id "aSWrItVXYbb0ii_rVoJrgAAAAIw"]
[Tue Nov 25 21:12:05.125984 2025] [:error] [pid 14168:tid 14188] [client 48.210.250.238:38228] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abc.php"] [unique_id "aSWrJfR-ZDU0QEgAIIuD4gAAANE"]
[Tue Nov 25 21:12:07.280426 2025] [:error] [pid 28739:tid 28770] [client 48.210.250.238:38596] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abc.php"] [unique_id "aSWrJxxGpKmlkG4FexSbEwAAAgg"]
[Tue Nov 25 22:20:24.275808 2025] [:error] [pid 14076:tid 14094] [client 54.173.250.15:59768] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSW7KHsB4Gz6Qw-pvBtRDAAAAA0"]
[Wed Nov 26 00:02:04.107594 2025] [:error] [pid 14076:tid 14097] [client 139.59.30.253:54358] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-admin/css/"] [unique_id "aSXS_HsB4Gz6Qw-pvBtvrgAAABA"], referer: binance.com
[Wed Nov 26 01:32:54.572303 2025] [:error] [pid 43843:tid 43861] [client 45.61.185.56:30691] [client 45.61.185.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.185.56, incrementing brute counter"] [hostname "aircraft-spruce.com.au"] [uri "/wp-login.php"] [unique_id "aSXoRhhx4v3NUNdMKDMm1QAAAdA"]
[Wed Nov 26 01:32:54.576290 2025] [:error] [pid 43843:tid 43861] [client 45.61.185.56:30691] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 04:54:35.364846 2025] [:error] [pid 3011:tid 3042] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.fr/
[Wed Nov 26 04:54:35.560239 2025] [:error] [pid 3011:tid 3049] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://duckduckgo.com/
[Wed Nov 26 04:54:35.713987 2025] [:error] [pid 3011:tid 3061] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.yahoo.com/
[Wed Nov 26 04:54:35.863819 2025] [:error] [pid 3011:tid 3044] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.yahoo.com/
[Wed Nov 26 04:54:37.156387 2025] [:error] [pid 3011:tid 3056] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.de/
[Wed Nov 26 04:54:39.936004 2025] [:error] [pid 3011:tid 3042] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.bing.com/
[Wed Nov 26 04:54:40.234233 2025] [:error] [pid 3011:tid 3061] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.yahoo.com/
[Wed Nov 26 04:54:40.431940 2025] [:error] [pid 3011:tid 3045] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.bing.com/
[Wed Nov 26 04:54:40.573219 2025] [:error] [pid 3011:tid 3058] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.fr/
[Wed Nov 26 04:54:40.763703 2025] [:error] [pid 3011:tid 3062] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.com/
[Wed Nov 26 04:54:40.936467 2025] [:error] [pid 3011:tid 3066] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.google.co.uk/
[Wed Nov 26 04:54:41.097793 2025] [:error] [pid 3011:tid 3057] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.yahoo.com/
[Wed Nov 26 04:54:41.262609 2025] [:error] [pid 3011:tid 3065] [client 4.241.208.5:8520] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.bing.com/
[Wed Nov 26 04:54:48.552274 2025] [autoindex:error] [pid 3011:tid 3060] [client 4.241.208.5:8520] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 13:29:08.805091 2025] [:error] [pid 34743:tid 34789] [client 145.239.10.137:45093] File does not exist: /usr/local/apache/htdocs/suspended-page/up2.php, referer: http://aircraft-spruce.com.au/up2.php
[Wed Nov 26 14:25:23.174028 2025] [:error] [pid 34830:tid 34850] [client 216.126.239.203:54862] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSadU0ukvkWgWN6jCR2vrQAAABI"]
[Wed Nov 26 16:06:37.416106 2025] [:error] [pid 46443:tid 46468] [client 202.78.236.11:62262] [client 202.78.236.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.78.236.11, incrementing ddos counter"] [hostname "aircraft-spruce.com.au"] [uri "/xmlrpc.php"] [unique_id "aSa1DcLmDsnHrj-QFB-YZQAAAFc"]
[Wed Nov 26 16:06:37.421955 2025] [:error] [pid 46443:tid 46468] [client 202.78.236.11:62262] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 26 22:07:51.756418 2025] [:error] [pid 45684:tid 45721] [client 34.223.107.236:37754] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aScJt_g5LMxwI4-PD1eSGgAAAAY"]
[Wed Nov 26 22:07:52.484102 2025] [:error] [pid 20733:tid 20735] [client 34.223.107.236:37760] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env"] [unique_id "aScJuAV9EP2HuRvnH8d5RwAAAMA"]
[Wed Nov 26 22:07:53.227815 2025] [:error] [pid 46443:tid 46447] [client 34.223.107.236:37766] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.local"] [unique_id "aScJucLmDsnHrj-QFB8XYgAAAEI"]
[Wed Nov 26 22:07:53.953361 2025] [:error] [pid 20733:tid 20746] [client 34.223.107.236:37780] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.dev"] [unique_id "aScJuQV9EP2HuRvnH8d5SAAAAMs"]
[Wed Nov 26 22:07:54.682044 2025] [:error] [pid 45685:tid 45766] [client 34.223.107.236:47578] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.prod"] [unique_id "aScJulj3f_NRdgU0DQ77eQAAARg"]
[Wed Nov 26 22:07:55.406188 2025] [:error] [pid 46443:tid 46445] [client 34.223.107.236:47590] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.staging"] [unique_id "aScJu8LmDsnHrj-QFB8XZQAAAEA"]
[Wed Nov 26 22:07:56.153370 2025] [:error] [pid 6471:tid 6496] [client 34.223.107.236:47606] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.development"] [unique_id "aScJvOh3Z9TZLlRuTiO5UQAAAJY"]
[Wed Nov 26 22:07:56.884098 2025] [:error] [pid 20733:tid 20741] [client 34.223.107.236:47610] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.production"] [unique_id "aScJvAV9EP2HuRvnH8d5TAAAAMY"]
[Wed Nov 26 22:07:57.607162 2025] [:error] [pid 45683:tid 45698] [client 34.223.107.236:47622] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.test"] [unique_id "aScJvRX1gQgNFW_222rQDQAAAUo"]
[Wed Nov 26 22:07:58.336749 2025] [:error] [pid 46443:tid 46464] [client 34.223.107.236:47630] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.backup"] [unique_id "aScJvsLmDsnHrj-QFB8XZwAAAFM"]
[Wed Nov 26 22:07:59.073669 2025] [:error] [pid 45683:tid 45712] [client 34.223.107.236:47644] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env~"] [unique_id "aScJvxX1gQgNFW_222rQDwAAAVg"]
[Wed Nov 26 22:07:59.798196 2025] [:error] [pid 45684:tid 45716] [client 34.223.107.236:47652] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.sample"] [unique_id "aScJv_g5LMxwI4-PD1eSIAAAAAE"]
[Wed Nov 26 22:08:00.531109 2025] [:error] [pid 45684:tid 45735] [client 34.223.107.236:47654] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.old"] [unique_id "aScJwPg5LMxwI4-PD1eSIgAAABQ"]
[Wed Nov 26 22:08:01.280159 2025] [:error] [pid 46443:tid 46460] [client 34.223.107.236:47664] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.bak"] [unique_id "aScJwcLmDsnHrj-QFB8XaAAAAE8"]
[Wed Nov 26 22:08:02.005226 2025] [:error] [pid 20733:tid 20736] [client 34.223.107.236:47668] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.save"] [unique_id "aScJwgV9EP2HuRvnH8d5TwAAAME"]
[Wed Nov 26 22:08:02.732240 2025] [:error] [pid 46443:tid 46469] [client 34.223.107.236:47670] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.orig"] [unique_id "aScJwsLmDsnHrj-QFB8XcwAAAFg"]
[Wed Nov 26 22:08:03.476206 2025] [:error] [pid 45769:tid 45779] [client 34.223.107.236:47680] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.swp"] [unique_id "aScJw1dG5Eht9c3yy4NF8AAAAcc"]
[Wed Nov 26 22:08:04.200443 2025] [:error] [pid 45769:tid 45780] [client 34.223.107.236:47690] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.tmp"] [unique_id "aScJxFdG5Eht9c3yy4NF8gAAAcg"]
[Wed Nov 26 22:08:04.932594 2025] [:error] [pid 20733:tid 20754] [client 34.223.107.236:55670] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env.dist"] [unique_id "aScJxAV9EP2HuRvnH8d5cgAAANM"]
[Wed Nov 26 22:08:05.658538 2025] [:error] [pid 45685:tid 45745] [client 34.223.107.236:55674] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/admin/.env"] [unique_id "aScJxVj3f_NRdgU0DQ77swAAAQM"]
[Wed Nov 26 22:08:06.400640 2025] [:error] [pid 45683:tid 45690] [client 34.223.107.236:55680] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/admin/.env.save"] [unique_id "aScJxhX1gQgNFW_222rQGgAAAUI"]
[Wed Nov 26 22:08:07.133350 2025] [:error] [pid 45685:tid 45748] [client 34.223.107.236:55694] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/admin/.env.bak"] [unique_id "aScJx1j3f_NRdgU0DQ77tAAAAQY"]
[Wed Nov 26 22:08:07.866565 2025] [:error] [pid 6471:tid 6474] [client 34.223.107.236:55708] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/admin/.env.old"] [unique_id "aScJx-h3Z9TZLlRuTiO5fwAAAIA"]
[Wed Nov 26 22:08:08.609373 2025] [:error] [pid 45769:tid 45782] [client 34.223.107.236:55710] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/api/.env"] [unique_id "aScJyFdG5Eht9c3yy4NF-wAAAco"]
[Wed Nov 26 22:08:09.339633 2025] [:error] [pid 45685:tid 45766] [client 34.223.107.236:55722] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/api/.env.save"] [unique_id "aScJyVj3f_NRdgU0DQ77tgAAARg"]
[Wed Nov 26 22:08:10.067315 2025] [:error] [pid 45684:tid 45726] [client 34.223.107.236:55732] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/api/.env.bak"] [unique_id "aScJyvg5LMxwI4-PD1eSQgAAAAs"]
[Wed Nov 26 22:08:10.799964 2025] [:error] [pid 45683:tid 45698] [client 34.223.107.236:55734] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/api/.env.old"] [unique_id "aScJyhX1gQgNFW_222rQHAAAAUo"]
[Wed Nov 26 22:08:11.529291 2025] [:error] [pid 45769:tid 45781] [client 34.223.107.236:55750] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/app/.env"] [unique_id "aScJy1dG5Eht9c3yy4NF_QAAAck"]
[Wed Nov 26 22:08:12.257116 2025] [:error] [pid 45683:tid 45708] [client 34.223.107.236:55762] [client 34.223.107.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/app/.env.save"] [unique_id "aScJzBX1gQgNFW_222rQHQAAAVQ"]
[Thu Nov 27 00:44:21.844232 2025] [:error] [pid 25262:tid 25327] [client 103.77.107.57:56890] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/sftp-config.json"] [unique_id "aScuZU3p81VU3bYILBU7PgAAAgY"]
[Thu Nov 27 03:56:58.589755 2025] [:error] [pid 6201:tid 6208] [client 216.126.239.203:38792] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env"] [unique_id "aSdbijkSJeRkIQGTjzwS_AAAAAM"]
[Thu Nov 27 04:12:42.642257 2025] [:error] [pid 6203:tid 6271] [client 213.21.239.4:51286] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/backup/.git/config"] [unique_id "aSdfOsbdRL7aKyrgqyy6sgAAAIs"]
[Thu Nov 27 04:12:42.650952 2025] [:error] [pid 6202:tid 6253] [client 213.21.239.4:51176] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/app/.git/config"] [unique_id "aSdfOtJa7NTP0XPyZ6lc6QAAAFQ"]
[Thu Nov 27 04:12:42.650952 2025] [:error] [pid 6202:tid 6240] [client 213.21.239.4:51222] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/developer/.git/config"] [unique_id "aSdfOtJa7NTP0XPyZ6lc6AAAAEc"]
[Thu Nov 27 04:12:42.651210 2025] [:error] [pid 6203:tid 6279] [client 213.21.239.4:51248] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/css../.git/config"] [unique_id "aSdfOsbdRL7aKyrgqyy6tAAAAJM"]
[Thu Nov 27 04:12:42.651454 2025] [:error] [pid 6203:tid 6280] [client 213.21.239.4:51316] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce/.git/config"] [unique_id "aSdfOsbdRL7aKyrgqyy6tQAAAJQ"]
[Thu Nov 27 04:12:42.651880 2025] [:error] [pid 6203:tid 6273] [client 213.21.239.4:51262] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce/.git/%0Aconfig"] [unique_id "aSdfOsbdRL7aKyrgqyy6tgAAAI0"]
[Thu Nov 27 04:12:42.652167 2025] [:error] [pid 6203:tid 6276] [client 213.21.239.4:51330] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce/;/.git/config"] [unique_id "aSdfOsbdRL7aKyrgqyy6twAAAJA"]
[Thu Nov 27 04:12:42.652802 2025] [:error] [pid 21017:tid 21075] [client 213.21.239.4:51328] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce../.git/config"] [unique_id "aSdfOqZA663ub03MMQt0HAAAARA"]
[Thu Nov 27 04:12:42.654427 2025] [:error] [pid 21017:tid 21059] [client 213.21.239.4:51334] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce/static../.git/config"] [unique_id "aSdfOqZA663ub03MMQt0HQAAAQA"]
[Thu Nov 27 04:12:42.657350 2025] [:error] [pid 6202:tid 6244] [client 213.21.239.4:51368] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce/.git/config;.."] [unique_id "aSdfOtJa7NTP0XPyZ6lc6gAAAEs"]
[Thu Nov 27 04:12:42.657470 2025] [:error] [pid 21017:tid 21072] [client 213.21.239.4:51210] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/application/.git/config"] [unique_id "aSdfOqZA663ub03MMQt0HgAAAQ0"]
[Thu Nov 27 04:12:42.658232 2025] [:error] [pid 6202:tid 6254] [client 213.21.239.4:51370] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce/.git/config;"] [unique_id "aSdfOtJa7NTP0XPyZ6lc6wAAAFU"]
[Thu Nov 27 04:12:42.660136 2025] [:error] [pid 6203:tid 6277] [client 213.21.239.4:51232] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/assets../.git/config"] [unique_id "aSdfOsbdRL7aKyrgqyy6uAAAAJE"]
[Thu Nov 27 04:12:42.661245 2025] [:error] [pid 6202:tid 6247] [client 213.21.239.4:51196] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/admin/.git/config"] [unique_id "aSdfOtJa7NTP0XPyZ6lc7AAAAE4"]
[Thu Nov 27 04:12:42.661715 2025] [:error] [pid 21017:tid 21070] [client 213.21.239.4:51236] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/content../.git/config"] [unique_id "aSdfOqZA663ub03MMQt0HwAAAQs"]
[Thu Nov 27 04:12:42.662223 2025] [:error] [pid 6203:tid 6270] [client 213.21.239.4:51302] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/common/.git/config"] [unique_id "aSdfOsbdRL7aKyrgqyy6uQAAAIo"]
[Thu Nov 27 04:12:42.666077 2025] [:error] [pid 6203:tid 6282] [client 213.21.239.4:51346] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce/..;/.git/config"] [unique_id "aSdfOsbdRL7aKyrgqyy6ugAAAJY"]
[Thu Nov 27 04:12:42.669239 2025] [:error] [pid 6203:tid 6268] [client 213.21.239.4:51264] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/dev/.git/config"] [unique_id "aSdfOsbdRL7aKyrgqyy6uwAAAIg"]
[Thu Nov 27 04:12:42.672639 2025] [:error] [pid 6203:tid 6263] [client 213.21.239.4:51270] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/database/.git/config"] [unique_id "aSdfOsbdRL7aKyrgqyy6vQAAAIM"]
[Thu Nov 27 04:12:42.673559 2025] [:error] [pid 21017:tid 21066] [client 213.21.239.4:51164] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/api/.git/config"] [unique_id "aSdfOqZA663ub03MMQt0IAAAAQc"]
[Thu Nov 27 04:12:44.610037 2025] [:error] [pid 6202:tid 6233] [client 213.21.239.4:51428] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.git/config;.."] [unique_id "aSdfPNJa7NTP0XPyZ6lc7wAAAEA"]
[Thu Nov 27 04:12:44.615089 2025] [:error] [pid 21017:tid 21067] [client 213.21.239.4:51458] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www.aircraft-spruce.com.au/.git/config;.."] [unique_id "aSdfPKZA663ub03MMQt0IgAAAQg"]
[Thu Nov 27 04:12:44.616127 2025] [:error] [pid 6203:tid 6260] [client 213.21.239.4:51398] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSdfPMbdRL7aKyrgqyy6xQAAAIA"]
[Thu Nov 27 04:12:44.619162 2025] [:error] [pid 21017:tid 21079] [client 213.21.239.4:51386] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www.aircraft-spruce.com.au/;/.git/config"] [unique_id "aSdfPKZA663ub03MMQt0IwAAARQ"]
[Thu Nov 27 04:12:44.619813 2025] [:error] [pid 6290:tid 6296] [client 213.21.239.4:51562] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www.aircraft-spruce.com.au/..;/.git/config"] [unique_id "aSdfPIqL4zye-zKr6suJLgAAAMI"]
[Thu Nov 27 04:12:44.620345 2025] [:error] [pid 6201:tid 6227] [client 213.21.239.4:51414] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.git/config;"] [unique_id "aSdfPDkSJeRkIQGTjzwYagAAABY"]
[Thu Nov 27 04:12:44.620910 2025] [:error] [pid 6201:tid 6206] [client 213.21.239.4:51410] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSdfPDkSJeRkIQGTjzwYawAAAAE"]
[Thu Nov 27 04:12:44.624823 2025] [:error] [pid 6290:tid 6313] [client 213.21.239.4:51610] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/message-api/.git/config"] [unique_id "aSdfPIqL4zye-zKr6suJMAAAANM"]
[Thu Nov 27 04:12:44.626790 2025] [:error] [pid 21017:tid 21068] [client 213.21.239.4:51452] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/git/.git/config"] [unique_id "aSdfPKZA663ub03MMQt0JQAAAQk"]
[Thu Nov 27 04:12:44.627965 2025] [:error] [pid 6201:tid 6209] [client 213.21.239.4:51490] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/m/.git/config"] [unique_id "aSdfPDkSJeRkIQGTjzwYbAAAAAQ"]
[Thu Nov 27 04:12:44.628952 2025] [:error] [pid 6290:tid 6306] [client 213.21.239.4:51520] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/;/.git/config"] [unique_id "aSdfPIqL4zye-zKr6suJMQAAAMw"]
[Thu Nov 27 04:12:44.629032 2025] [:error] [pid 6290:tid 6304] [client 213.21.239.4:51532] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/js../.git/config"] [unique_id "aSdfPIqL4zye-zKr6suJMgAAAMo"]
[Thu Nov 27 04:12:44.631942 2025] [:error] [pid 6290:tid 6301] [client 213.21.239.4:51554] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/live/.git/config"] [unique_id "aSdfPIqL4zye-zKr6suJMwAAAMc"]
[Thu Nov 27 04:12:44.633922 2025] [:error] [pid 6290:tid 6303] [client 213.21.239.4:51506] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/images../.git/config"] [unique_id "aSdfPIqL4zye-zKr6suJNAAAAMk"]
[Thu Nov 27 04:12:44.634368 2025] [:error] [pid 21017:tid 21074] [client 213.21.239.4:51482] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/..;/.git/config"] [unique_id "aSdfPKZA663ub03MMQt0JgAAAQ8"]
[Thu Nov 27 04:12:44.634985 2025] [:error] [pid 6201:tid 6207] [client 213.21.239.4:51546] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/lib../.git/config"] [unique_id "aSdfPDkSJeRkIQGTjzwYbQAAAAI"]
[Thu Nov 27 04:12:44.636761 2025] [:error] [pid 6202:tid 6242] [client 213.21.239.4:51628] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www.aircraft-spruce.com.au/.git/config;"] [unique_id "aSdfPNJa7NTP0XPyZ6lc8AAAAEk"]
[Thu Nov 27 04:12:44.637866 2025] [:error] [pid 6290:tid 6300] [client 213.21.239.4:51510] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/img../.git/config"] [unique_id "aSdfPIqL4zye-zKr6suJNQAAAMY"]
[Thu Nov 27 04:12:44.640320 2025] [:error] [pid 6290:tid 6314] [client 213.21.239.4:51474] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www.aircraft-spruce.com.au/static../.git/config"] [unique_id "aSdfPIqL4zye-zKr6suJNgAAANQ"]
[Thu Nov 27 04:12:44.642532 2025] [:error] [pid 6201:tid 6218] [client 213.21.239.4:51576] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www.aircraft-spruce.com.au../.git/config"] [unique_id "aSdfPDkSJeRkIQGTjzwYbwAAAA0"]
[Thu Nov 27 04:12:44.643098 2025] [:error] [pid 21017:tid 21077] [client 213.21.239.4:51592] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www.aircraft-spruce.com.au/.git/config"] [unique_id "aSdfPKZA663ub03MMQt0JwAAARI"]
[Thu Nov 27 04:12:44.644901 2025] [:error] [pid 6202:tid 6250] [client 213.21.239.4:51596] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www.aircraft-spruce.com.au/.git/%0Aconfig"] [unique_id "aSdfPNJa7NTP0XPyZ6lc8QAAAFE"]
[Thu Nov 27 04:12:46.610724 2025] [:error] [pid 6290:tid 6300] [client 213.21.239.4:51894] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www/.git/config;"] [unique_id "aSdfPoqL4zye-zKr6suJOwAAAMY"]
[Thu Nov 27 04:12:46.612020 2025] [:error] [pid 6203:tid 6261] [client 213.21.239.4:52048] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www/;/.git/config"] [unique_id "aSdfPsbdRL7aKyrgqyy6yQAAAIE"]
[Thu Nov 27 04:12:46.612066 2025] [:error] [pid 6203:tid 6267] [client 213.21.239.4:51956] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git/config;.."] [unique_id "aSdfPsbdRL7aKyrgqyy6yAAAAIc"]
[Thu Nov 27 04:12:46.612117 2025] [:error] [pid 6203:tid 6272] [client 213.21.239.4:51984] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/..;/.git/config"] [unique_id "aSdfPsbdRL7aKyrgqyy6ygAAAIw"]
[Thu Nov 27 04:12:46.617331 2025] [:error] [pid 6203:tid 6273] [client 213.21.239.4:52094] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/www/config"] [unique_id "aSdfPsbdRL7aKyrgqyy6ywAAAI0"]
[Thu Nov 27 04:12:46.618943 2025] [:error] [pid 6290:tid 6314] [client 213.21.239.4:51906] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git/%0Aconfig"] [unique_id "aSdfPoqL4zye-zKr6suJPAAAANQ"]
[Thu Nov 27 04:12:46.619395 2025] [:error] [pid 6203:tid 6279] [client 213.21.239.4:51966] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au../.git/config"] [unique_id "aSdfPsbdRL7aKyrgqyy6zAAAAJM"]
[Thu Nov 27 04:12:46.620070 2025] [:error] [pid 6290:tid 6312] [client 213.21.239.4:51994] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/;/.git/config"] [unique_id "aSdfPoqL4zye-zKr6suJPQAAANI"]
[Thu Nov 27 04:12:46.622145 2025] [:error] [pid 6201:tid 6229] [client 213.21.239.4:52108] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www/.git/config"] [unique_id "aSdfPjkSJeRkIQGTjzwYegAAABg"]
[Thu Nov 27 04:12:46.622602 2025] [:error] [pid 6203:tid 6271] [client 213.21.239.4:51922] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www/..;/.git/config"] [unique_id "aSdfPsbdRL7aKyrgqyy6zQAAAIs"]
[Thu Nov 27 04:12:46.623128 2025] [:error] [pid 6203:tid 6280] [client 213.21.239.4:52018] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/prod/.git/config"] [unique_id "aSdfPsbdRL7aKyrgqyy6zgAAAJQ"]
[Thu Nov 27 04:12:46.625100 2025] [:error] [pid 6201:tid 6205] [client 213.21.239.4:52058] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/new/.git/config"] [unique_id "aSdfPjkSJeRkIQGTjzwYewAAAAA"]
[Thu Nov 27 04:12:46.625185 2025] [:error] [pid 21017:tid 21081] [client 213.21.239.4:51948] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git/config"] [unique_id "aSdfPqZA663ub03MMQt0LwAAARY"]
[Thu Nov 27 04:12:46.627223 2025] [:error] [pid 21017:tid 21065] [client 213.21.239.4:52084] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www../.git/config"] [unique_id "aSdfPqZA663ub03MMQt0MAAAAQY"]
[Thu Nov 27 04:12:46.627559 2025] [:error] [pid 6201:tid 6213] [client 213.21.239.4:52082] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www/.git/config;.."] [unique_id "aSdfPjkSJeRkIQGTjzwYfAAAAAg"]
[Thu Nov 27 04:12:46.628979 2025] [:error] [pid 21017:tid 21082] [client 213.21.239.4:52132] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au../config"] [unique_id "aSdfPqZA663ub03MMQt0MQAAARc"]
[Thu Nov 27 04:12:46.630663 2025] [:error] [pid 6201:tid 6228] [client 213.21.239.4:52102] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www/.git/%0Aconfig"] [unique_id "aSdfPjkSJeRkIQGTjzwYfQAAABc"]
[Thu Nov 27 04:12:46.634933 2025] [:error] [pid 6203:tid 6276] [client 213.21.239.4:51936] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/qa/.git/config"] [unique_id "aSdfPsbdRL7aKyrgqyy6zwAAAJA"]
[Thu Nov 27 04:12:46.635667 2025] [:error] [pid 6203:tid 6277] [client 213.21.239.4:51938] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/config"] [unique_id "aSdfPsbdRL7aKyrgqyy60AAAAJE"]
[Thu Nov 27 04:12:46.636735 2025] [:error] [pid 6202:tid 6256] [client 213.21.239.4:51970] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git;/config"] [unique_id "aSdfPtJa7NTP0XPyZ6lc_QAAAFc"]
[Thu Nov 27 04:12:46.638507 2025] [:error] [pid 6202:tid 6234] [client 213.21.239.4:52032] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/public/.git/config"] [unique_id "aSdfPtJa7NTP0XPyZ6lc_gAAAEE"]
[Thu Nov 27 04:12:46.638840 2025] [:error] [pid 6201:tid 6212] [client 213.21.239.4:52010] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/static../.git/config"] [unique_id "aSdfPjkSJeRkIQGTjzwYfgAAAAc"]
[Thu Nov 27 04:12:46.641360 2025] [:error] [pid 6201:tid 6217] [client 213.21.239.4:52072] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/www../config"] [unique_id "aSdfPjkSJeRkIQGTjzwYfwAAAAw"]
[Thu Nov 27 04:12:46.641420 2025] [:error] [pid 6202:tid 6257] [client 213.21.239.4:52122] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/www/.git;/config"] [unique_id "aSdfPtJa7NTP0XPyZ6lc_wAAAFg"]
[Thu Nov 27 04:12:46.642086 2025] [:error] [pid 6201:tid 6216] [client 213.21.239.4:52124] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git/config;"] [unique_id "aSdfPjkSJeRkIQGTjzwYgAAAAAs"]
[Thu Nov 27 04:12:48.641179 2025] [:error] [pid 21017:tid 21076] [client 213.21.239.4:52360] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/www/config"] [unique_id "aSdfQKZA663ub03MMQt0PgAAARE"]
[Thu Nov 27 04:12:48.641962 2025] [:error] [pid 6290:tid 6306] [client 213.21.239.4:52374] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au../config"] [unique_id "aSdfQIqL4zye-zKr6suJRAAAAMw"]
[Thu Nov 27 04:12:48.663856 2025] [:error] [pid 6290:tid 6307] [client 213.21.239.4:52410] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/www/.git;/config"] [unique_id "aSdfQIqL4zye-zKr6suJSAAAAM0"]
[Thu Nov 27 04:12:48.667187 2025] [:error] [pid 6202:tid 6235] [client 213.21.239.4:52400] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/.git;/config"] [unique_id "aSdfQNJa7NTP0XPyZ6ldBwAAAEI"]
[Thu Nov 27 04:12:48.669694 2025] [:error] [pid 21017:tid 21081] [client 213.21.239.4:52388] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/aircraft-spruce.com.au/config"] [unique_id "aSdfQKZA663ub03MMQt0QAAAARY"]
[Thu Nov 27 04:12:48.700882 2025] [:error] [pid 6201:tid 6218] [client 213.21.239.4:52406] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/www../config"] [unique_id "aSdfQDkSJeRkIQGTjzwYhwAAAA0"]
[Thu Nov 27 04:12:49.602299 2025] [:error] [pid 6202:tid 6234] [client 213.21.239.4:52432] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/staging/.git/config"] [unique_id "aSdfQdJa7NTP0XPyZ6ldCQAAAEE"]
[Thu Nov 27 04:12:49.602299 2025] [:error] [pid 6202:tid 6257] [client 213.21.239.4:52474] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/uat/.git/config"] [unique_id "aSdfQdJa7NTP0XPyZ6ldCgAAAFg"]
[Thu Nov 27 04:12:49.611268 2025] [:error] [pid 6290:tid 6299] [client 213.21.239.4:52440] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/static../.git/config"] [unique_id "aSdfQYqL4zye-zKr6suJTAAAAMU"]
[Thu Nov 27 04:12:49.611401 2025] [:error] [pid 6202:tid 6249] [client 213.21.239.4:52466] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/www/static../.git/config"] [unique_id "aSdfQdJa7NTP0XPyZ6ldCwAAAFA"]
[Thu Nov 27 04:12:49.612760 2025] [:error] [pid 6202:tid 6241] [client 213.21.239.4:52450] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSdfQdJa7NTP0XPyZ6ldDAAAAEg"]
[Thu Nov 27 04:12:49.615562 2025] [:error] [pid 21017:tid 21063] [client 213.21.239.4:52484] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSdfQaZA663ub03MMQt0QQAAAQQ"]
[Thu Nov 27 04:12:49.617263 2025] [:error] [pid 6201:tid 6221] [client 213.21.239.4:52418] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSdfQTkSJeRkIQGTjzwYiAAAABA"]
[Thu Nov 27 04:12:49.619754 2025] [:error] [pid 6201:tid 6225] [client 213.21.239.4:52458] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/web/.git/config"] [unique_id "aSdfQTkSJeRkIQGTjzwYiQAAABQ"]
[Thu Nov 27 05:20:32.463499 2025] [:error] [pid 21017:tid 21068] [client 130.33.50.246:50182] File does not exist: /usr/local/apache/htdocs/suspended-page/tj.php
[Thu Nov 27 05:20:32.581631 2025] [:error] [pid 21017:tid 21073] [client 130.33.50.246:50182] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Thu Nov 27 05:20:32.718607 2025] [:error] [pid 21017:tid 21080] [client 130.33.50.246:50182] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Thu Nov 27 05:20:32.837565 2025] [:error] [pid 21017:tid 21062] [client 130.33.50.246:50182] File does not exist: /usr/local/apache/htdocs/suspended-page/f8moue.php
[Thu Nov 27 05:20:32.957757 2025] [:error] [pid 21017:tid 21072] [client 130.33.50.246:50182] File does not exist: /usr/local/apache/htdocs/suspended-page/3i8som87avh59dosfymtvCakc.php
[Thu Nov 27 05:20:33.077789 2025] [:error] [pid 21017:tid 21077] [client 130.33.50.246:50182] File does not exist: /usr/local/apache/htdocs/suspended-page/nonesoterically.php
[Thu Nov 27 05:20:33.198461 2025] [:error] [pid 21017:tid 21063] [client 130.33.50.246:50182] File does not exist: /usr/local/apache/htdocs/suspended-page/palsy.php
[Thu Nov 27 05:20:33.316072 2025] [:error] [pid 21017:tid 21070] [client 130.33.50.246:50182] File does not exist: /usr/local/apache/htdocs/suspended-page/vanda.php
[Thu Nov 27 05:20:33.435919 2025] [:error] [pid 21017:tid 21081] [client 130.33.50.246:50182] File does not exist: /usr/local/apache/htdocs/suspended-page/asciferous.php
[Thu Nov 27 05:20:33.554940 2025] [:error] [pid 21017:tid 21075] [client 130.33.50.246:50182] File does not exist: /usr/local/apache/htdocs/suspended-page/coenoecic.php
[Thu Nov 27 05:20:33.668242 2025] [:error] [pid 21017:tid 21068] [client 130.33.50.246:50182] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cyanamids.php"] [unique_id "aSdvIaZA663ub03MMQuQ6QAAAQk"]
[Thu Nov 27 05:20:33.895301 2025] [:error] [pid 21017:tid 21062] [client 130.33.50.246:50186] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cyanamids.php"] [unique_id "aSdvIaZA663ub03MMQuQ6wAAAQM"]
[Thu Nov 27 05:20:34.122676 2025] [:error] [pid 6203:tid 6279] [client 130.33.50.246:50203] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cyanamids.php"] [unique_id "aSdvIsbdRL7aKyrgqyzOYAAAAJM"]
[Thu Nov 27 05:20:34.349354 2025] [:error] [pid 6202:tid 6238] [client 130.33.50.246:50211] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/cyanamids.php"] [unique_id "aSdvItJa7NTP0XPyZ6ltvwAAAEU"]
[Thu Nov 27 05:20:34.589973 2025] [:error] [pid 21017:tid 21077] [client 130.33.50.246:50225] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disengaging.php"] [unique_id "aSdvIqZA663ub03MMQuQ7gAAARI"]
[Thu Nov 27 05:20:34.817061 2025] [:error] [pid 21017:tid 21067] [client 130.33.50.246:50199] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disengaging.php"] [unique_id "aSdvIqZA663ub03MMQuQ7wAAAQg"]
[Thu Nov 27 05:20:35.045610 2025] [:error] [pid 21017:tid 21063] [client 130.33.50.246:50176] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disengaging.php"] [unique_id "aSdvI6ZA663ub03MMQuQ8AAAAQQ"]
[Thu Nov 27 05:20:35.272368 2025] [:error] [pid 6201:tid 6225] [client 130.33.50.246:49680] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disengaging.php"] [unique_id "aSdvIzkSJeRkIQGTjzwpHAAAABQ"]
[Thu Nov 27 05:20:35.503509 2025] [:error] [pid 6203:tid 6284] [client 130.33.50.246:49688] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disquiet.php"] [unique_id "aSdvI8bdRL7aKyrgqyzOYgAAAJg"]
[Thu Nov 27 05:20:35.733923 2025] [:error] [pid 6290:tid 6294] [client 130.33.50.246:49686] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disquiet.php"] [unique_id "aSdvI4qL4zye-zKr6sufEAAAAMA"]
[Thu Nov 27 05:20:35.961405 2025] [:error] [pid 21017:tid 21061] [client 130.33.50.246:49666] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disquiet.php"] [unique_id "aSdvI6ZA663ub03MMQuQ9wAAAQI"]
[Thu Nov 27 05:20:36.189162 2025] [:error] [pid 6201:tid 6208] [client 130.33.50.246:50195] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/disquiet.php"] [unique_id "aSdvJDkSJeRkIQGTjzwpHQAAAAM"]
[Thu Nov 27 05:20:36.430906 2025] [:error] [pid 6201:tid 6223] [client 130.33.50.246:50234] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/duplicand.php"] [unique_id "aSdvJDkSJeRkIQGTjzwpHgAAABI"]
[Thu Nov 27 05:20:36.658789 2025] [:error] [pid 6201:tid 6207] [client 130.33.50.246:49664] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/duplicand.php"] [unique_id "aSdvJDkSJeRkIQGTjzwpHwAAAAI"]
[Thu Nov 27 05:20:36.886040 2025] [:error] [pid 6290:tid 6298] [client 130.33.50.246:50208] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/duplicand.php"] [unique_id "aSdvJIqL4zye-zKr6sufEQAAAMQ"]
[Thu Nov 27 05:20:37.114659 2025] [:error] [pid 6201:tid 6227] [client 130.33.50.246:50181] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/duplicand.php"] [unique_id "aSdvJTkSJeRkIQGTjzwpIAAAABY"]
[Thu Nov 27 05:20:37.346042 2025] [:error] [pid 21017:tid 21066] [client 130.33.50.246:50205] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/parturiency.php"] [unique_id "aSdvJaZA663ub03MMQuRAAAAAQc"]
[Thu Nov 27 05:20:37.573035 2025] [:error] [pid 6203:tid 6270] [client 130.33.50.246:50224] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/parturiency.php"] [unique_id "aSdvJcbdRL7aKyrgqyzOZwAAAIo"]
[Thu Nov 27 05:20:37.800982 2025] [:error] [pid 6203:tid 6264] [client 130.33.50.246:50202] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/parturiency.php"] [unique_id "aSdvJcbdRL7aKyrgqyzOaAAAAIQ"]
[Thu Nov 27 05:20:38.035294 2025] [:error] [pid 6202:tid 6237] [client 130.33.50.246:49690] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/parturiency.php"] [unique_id "aSdvJtJa7NTP0XPyZ6ltxgAAAEQ"]
[Thu Nov 27 05:20:38.269402 2025] [:error] [pid 6202:tid 6241] [client 130.33.50.246:50200] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tithings.php"] [unique_id "aSdvJtJa7NTP0XPyZ6ltxwAAAEg"]
[Thu Nov 27 05:20:38.513591 2025] [:error] [pid 6203:tid 6265] [client 130.33.50.246:50223] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tithings.php"] [unique_id "aSdvJsbdRL7aKyrgqyzOaQAAAIU"]
[Thu Nov 27 05:20:38.741509 2025] [:error] [pid 6290:tid 6298] [client 130.33.50.246:27136] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tithings.php"] [unique_id "aSdvJoqL4zye-zKr6sufKQAAAMQ"]
[Thu Nov 27 05:20:38.974684 2025] [:error] [pid 6290:tid 6297] [client 130.33.50.246:50178] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/tithings.php"] [unique_id "aSdvJoqL4zye-zKr6sufKgAAAMM"]
[Thu Nov 27 05:20:39.206320 2025] [:error] [pid 6290:tid 6300] [client 130.33.50.246:50217] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ww5.php"] [unique_id "aSdvJ4qL4zye-zKr6sufLQAAAMY"]
[Thu Nov 27 05:20:39.437544 2025] [:error] [pid 6203:tid 6262] [client 130.33.50.246:49678] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ww5.php"] [unique_id "aSdvJ8bdRL7aKyrgqyzObAAAAII"]
[Thu Nov 27 05:20:39.664809 2025] [:error] [pid 6202:tid 6251] [client 130.33.50.246:49671] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ww5.php"] [unique_id "aSdvJ9Ja7NTP0XPyZ6ltygAAAFI"]
[Thu Nov 27 05:20:39.895486 2025] [:error] [pid 21017:tid 21068] [client 130.33.50.246:50235] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ww5.php"] [unique_id "aSdvJ6ZA663ub03MMQuRDgAAAQk"]
[Thu Nov 27 05:20:40.123951 2025] [:error] [pid 21017:tid 21079] [client 130.33.50.246:50239] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/z60.php"] [unique_id "aSdvKKZA663ub03MMQuRDwAAARQ"]
[Thu Nov 27 05:20:40.357013 2025] [:error] [pid 6202:tid 6256] [client 130.33.50.246:49675] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/z60.php"] [unique_id "aSdvKNJa7NTP0XPyZ6ltywAAAFc"]
[Thu Nov 27 05:20:40.584762 2025] [:error] [pid 6290:tid 6311] [client 130.33.50.246:49708] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/z60.php"] [unique_id "aSdvKIqL4zye-zKr6sufMAAAANE"]
[Thu Nov 27 05:20:40.816702 2025] [:error] [pid 21017:tid 21062] [client 130.33.50.246:50215] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/z60.php"] [unique_id "aSdvKKZA663ub03MMQuREwAAAQM"]
[Thu Nov 27 05:20:41.046723 2025] [:error] [pid 6201:tid 6211] [client 130.33.50.246:50207] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-themes.php"] [unique_id "aSdvKTkSJeRkIQGTjzwpKgAAAAY"]
[Thu Nov 27 05:20:41.276838 2025] [:error] [pid 6201:tid 6212] [client 130.33.50.246:27141] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-themes.php"] [unique_id "aSdvKTkSJeRkIQGTjzwpLAAAAAc"]
[Thu Nov 27 05:20:41.519772 2025] [:error] [pid 6203:tid 6279] [client 130.33.50.246:50228] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-themes.php"] [unique_id "aSdvKcbdRL7aKyrgqyzOdAAAAJM"]
[Thu Nov 27 05:20:41.761099 2025] [:error] [pid 21017:tid 21083] [client 130.33.50.246:50238] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-themes.php"] [unique_id "aSdvKaZA663ub03MMQuRHwAAARg"]
[Thu Nov 27 05:20:41.993774 2025] [:error] [pid 6290:tid 6309] [client 130.33.50.246:49673] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/edd.php"] [unique_id "aSdvKYqL4zye-zKr6sufOQAAAM8"]
[Thu Nov 27 05:20:42.241200 2025] [:error] [pid 6203:tid 6284] [client 130.33.50.246:50180] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/edd.php"] [unique_id "aSdvKsbdRL7aKyrgqyzOdgAAAJg"]
[Thu Nov 27 05:20:42.468525 2025] [:error] [pid 6203:tid 6267] [client 130.33.50.246:49695] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/edd.php"] [unique_id "aSdvKsbdRL7aKyrgqyzOdwAAAIc"]
[Thu Nov 27 05:20:42.697871 2025] [:error] [pid 6203:tid 6274] [client 130.33.50.246:49697] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/edd.php"] [unique_id "aSdvKsbdRL7aKyrgqyzOeAAAAI4"]
[Thu Nov 27 05:20:42.924638 2025] [:error] [pid 6203:tid 6271] [client 130.33.50.246:49685] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bo.php"] [unique_id "aSdvKsbdRL7aKyrgqyzOeQAAAIs"]
[Thu Nov 27 05:20:43.154923 2025] [:error] [pid 6290:tid 6302] [client 130.33.50.246:49683] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bo.php"] [unique_id "aSdvK4qL4zye-zKr6sufOgAAAMg"]
[Thu Nov 27 05:20:43.381882 2025] [:error] [pid 6201:tid 6219] [client 130.33.50.246:49670] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bo.php"] [unique_id "aSdvKzkSJeRkIQGTjzwpPgAAAA4"]
[Thu Nov 27 05:20:43.608810 2025] [:error] [pid 6290:tid 6306] [client 130.33.50.246:50237] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bo.php"] [unique_id "aSdvK4qL4zye-zKr6sufPQAAAMw"]
[Thu Nov 27 05:20:43.840712 2025] [:error] [pid 6202:tid 6244] [client 130.33.50.246:49665] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bn.php"] [unique_id "aSdvK9Ja7NTP0XPyZ6ltzgAAAEs"]
[Thu Nov 27 05:20:44.068094 2025] [:error] [pid 6203:tid 6270] [client 130.33.50.246:50216] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bn.php"] [unique_id "aSdvLMbdRL7aKyrgqyzOegAAAIo"]
[Thu Nov 27 05:20:44.299368 2025] [:error] [pid 6202:tid 6236] [client 130.33.50.246:49706] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bn.php"] [unique_id "aSdvLNJa7NTP0XPyZ6ltzwAAAEM"]
[Thu Nov 27 05:20:44.529365 2025] [:error] [pid 21017:tid 21060] [client 130.33.50.246:49712] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/bn.php"] [unique_id "aSdvLKZA663ub03MMQuRMAAAAQE"]
[Thu Nov 27 05:20:44.756528 2025] [:error] [pid 6202:tid 6233] [client 130.33.50.246:27160] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/fishmen.php"] [unique_id "aSdvLNJa7NTP0XPyZ6lt0AAAAEA"]
[Thu Nov 27 05:20:44.992193 2025] [:error] [pid 21017:tid 21063] [client 130.33.50.246:50231] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/fishmen.php"] [unique_id "aSdvLKZA663ub03MMQuRMwAAAQQ"]
[Thu Nov 27 05:20:45.223130 2025] [:error] [pid 21017:tid 21083] [client 130.33.50.246:50193] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/fishmen.php"] [unique_id "aSdvLaZA663ub03MMQuRNQAAARg"]
[Thu Nov 27 05:20:45.451386 2025] [:error] [pid 21017:tid 21081] [client 130.33.50.246:49668] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/fishmen.php"] [unique_id "aSdvLaZA663ub03MMQuRNgAAARY"]
[Thu Nov 27 05:20:45.684048 2025] [:error] [pid 21017:tid 21078] [client 130.33.50.246:49693] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/obfuscous.php"] [unique_id "aSdvLaZA663ub03MMQuROAAAARM"]
[Thu Nov 27 05:20:45.910796 2025] [:error] [pid 6203:tid 6260] [client 130.33.50.246:49677] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/obfuscous.php"] [unique_id "aSdvLcbdRL7aKyrgqyzOfgAAAIA"]
[Thu Nov 27 05:20:46.138152 2025] [:error] [pid 6290:tid 6300] [client 130.33.50.246:50204] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/obfuscous.php"] [unique_id "aSdvLoqL4zye-zKr6sufPwAAAMY"]
[Thu Nov 27 05:20:46.370579 2025] [:error] [pid 6203:tid 6266] [client 130.33.50.246:49718] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/obfuscous.php"] [unique_id "aSdvLsbdRL7aKyrgqyzOgAAAAIY"]
[Thu Nov 27 05:20:46.598649 2025] [:error] [pid 6203:tid 6272] [client 130.33.50.246:49691] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/oitava.php"] [unique_id "aSdvLsbdRL7aKyrgqyzOgQAAAIw"]
[Thu Nov 27 05:20:46.825329 2025] [:error] [pid 6290:tid 6314] [client 130.33.50.246:50221] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/oitava.php"] [unique_id "aSdvLoqL4zye-zKr6sufQAAAANQ"]
[Thu Nov 27 05:20:47.052402 2025] [:error] [pid 21017:tid 21059] [client 130.33.50.246:50210] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/oitava.php"] [unique_id "aSdvL6ZA663ub03MMQuRPgAAAQA"]
[Thu Nov 27 05:20:47.280869 2025] [:error] [pid 6290:tid 6318] [client 130.33.50.246:27150] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/oitava.php"] [unique_id "aSdvL4qL4zye-zKr6sufQQAAANg"]
[Thu Nov 27 05:20:47.516302 2025] [:error] [pid 21017:tid 21064] [client 130.33.50.246:49714] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/phrensying.php"] [unique_id "aSdvL6ZA663ub03MMQuRQAAAAQU"]
[Thu Nov 27 05:20:47.755319 2025] [:error] [pid 6203:tid 6268] [client 130.33.50.246:49667] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/phrensying.php"] [unique_id "aSdvL8bdRL7aKyrgqyzOhAAAAIg"]
[Thu Nov 27 05:20:47.987783 2025] [:error] [pid 21017:tid 21073] [client 130.33.50.246:50187] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/phrensying.php"] [unique_id "aSdvL6ZA663ub03MMQuRRAAAAQ4"]
[Thu Nov 27 05:20:48.226393 2025] [:error] [pid 21017:tid 21063] [client 130.33.50.246:49679] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/phrensying.php"] [unique_id "aSdvMKZA663ub03MMQuRRgAAAQQ"]
[Thu Nov 27 05:20:48.463861 2025] [:error] [pid 21017:tid 21072] [client 130.33.50.246:50208] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/pyrometry.php"] [unique_id "aSdvMKZA663ub03MMQuRSQAAAQ0"]
[Thu Nov 27 05:20:48.693971 2025] [:error] [pid 21017:tid 21075] [client 130.33.50.246:50222] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/pyrometry.php"] [unique_id "aSdvMKZA663ub03MMQuRSwAAARA"]
[Thu Nov 27 05:20:48.924038 2025] [:error] [pid 21017:tid 21071] [client 130.33.50.246:50188] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/pyrometry.php"] [unique_id "aSdvMKZA663ub03MMQuRTQAAAQw"]
[Thu Nov 27 05:20:49.152654 2025] [:error] [pid 21017:tid 21062] [client 130.33.50.246:49710] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/pyrometry.php"] [unique_id "aSdvMaZA663ub03MMQuRTgAAAQM"]
[Thu Nov 27 05:20:49.380990 2025] [:error] [pid 6290:tid 6301] [client 130.33.50.246:50209] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unprecipitously.php"] [unique_id "aSdvMYqL4zye-zKr6sufQgAAAMc"]
[Thu Nov 27 05:20:49.620285 2025] [:error] [pid 21017:tid 21066] [client 130.33.50.246:49724] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unprecipitously.php"] [unique_id "aSdvMaZA663ub03MMQuRTwAAAQc"]
[Thu Nov 27 05:20:49.851041 2025] [:error] [pid 21017:tid 21077] [client 130.33.50.246:50233] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unprecipitously.php"] [unique_id "aSdvMaZA663ub03MMQuRUwAAARI"]
[Thu Nov 27 05:20:50.079841 2025] [:error] [pid 21017:tid 21082] [client 130.33.50.246:49682] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unprecipitously.php"] [unique_id "aSdvMqZA663ub03MMQuRVQAAARc"]
[Thu Nov 27 05:20:50.308329 2025] [:error] [pid 6290:tid 6313] [client 130.33.50.246:27189] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unbefittingly.php"] [unique_id "aSdvMoqL4zye-zKr6sufQwAAANM"]
[Thu Nov 27 05:20:50.535324 2025] [:error] [pid 21017:tid 21067] [client 130.33.50.246:27163] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unbefittingly.php"] [unique_id "aSdvMqZA663ub03MMQuRWAAAAQg"]
[Thu Nov 27 05:20:50.761321 2025] [:error] [pid 6290:tid 6317] [client 130.33.50.246:49689] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unbefittingly.php"] [unique_id "aSdvMoqL4zye-zKr6sufRgAAANc"]
[Thu Nov 27 05:20:50.987605 2025] [:error] [pid 21017:tid 21060] [client 130.33.50.246:49723] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unbefittingly.php"] [unique_id "aSdvMqZA663ub03MMQuRXAAAAQE"]
[Thu Nov 27 05:20:51.215678 2025] [:error] [pid 6202:tid 6242] [client 130.33.50.246:50194] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-home.php"] [unique_id "aSdvM9Ja7NTP0XPyZ6lt1AAAAEk"]
[Thu Nov 27 05:20:51.455521 2025] [:error] [pid 6202:tid 6252] [client 130.33.50.246:27170] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-home.php"] [unique_id "aSdvM9Ja7NTP0XPyZ6lt1gAAAFM"]
[Thu Nov 27 05:20:51.682072 2025] [:error] [pid 6203:tid 6261] [client 130.33.50.246:49722] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-home.php"] [unique_id "aSdvM8bdRL7aKyrgqyzOhwAAAIE"]
[Thu Nov 27 05:20:51.909084 2025] [:error] [pid 21017:tid 21071] [client 130.33.50.246:50227] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-home.php"] [unique_id "aSdvM6ZA663ub03MMQuRYQAAAQw"]
[Thu Nov 27 05:20:52.135481 2025] [:error] [pid 6201:tid 6214] [client 130.33.50.246:49703] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSdvNDkSJeRkIQGTjzwpQgAAAAk"]
[Thu Nov 27 05:20:52.362520 2025] [:error] [pid 21017:tid 21059] [client 130.33.50.246:27157] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSdvNKZA663ub03MMQuRYwAAAQA"]
[Thu Nov 27 05:20:52.589876 2025] [:error] [pid 6201:tid 6225] [client 130.33.50.246:50219] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSdvNDkSJeRkIQGTjzwpRAAAABQ"]
[Thu Nov 27 05:20:52.816331 2025] [:error] [pid 21017:tid 21064] [client 130.33.50.246:50191] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSdvNKZA663ub03MMQuRZgAAAQU"]
[Thu Nov 27 05:20:53.048218 2025] [:error] [pid 21017:tid 21077] [client 130.33.50.246:49717] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-ac.php"] [unique_id "aSdvNaZA663ub03MMQuRZwAAARI"]
[Thu Nov 27 05:20:53.283948 2025] [:error] [pid 6201:tid 6208] [client 130.33.50.246:50218] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-ac.php"] [unique_id "aSdvNTkSJeRkIQGTjzwpRQAAAAM"]
[Thu Nov 27 05:20:53.515204 2025] [:error] [pid 6203:tid 6262] [client 130.33.50.246:27185] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-ac.php"] [unique_id "aSdvNcbdRL7aKyrgqyzOigAAAII"]
[Thu Nov 27 05:20:53.750021 2025] [:error] [pid 6203:tid 6275] [client 130.33.50.246:49726] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-ac.php"] [unique_id "aSdvNcbdRL7aKyrgqyzOjAAAAI8"]
[Thu Nov 27 05:20:53.976890 2025] [:error] [pid 6203:tid 6260] [client 130.33.50.246:49694] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/nof.php"] [unique_id "aSdvNcbdRL7aKyrgqyzOjQAAAIA"]
[Thu Nov 27 05:20:54.204634 2025] [:error] [pid 6203:tid 6269] [client 130.33.50.246:49692] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/nof.php"] [unique_id "aSdvNsbdRL7aKyrgqyzOjgAAAIk"]
[Thu Nov 27 05:20:54.431672 2025] [:error] [pid 21017:tid 21079] [client 130.33.50.246:49676] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/nof.php"] [unique_id "aSdvNqZA663ub03MMQuRaQAAARQ"]
[Thu Nov 27 05:20:54.696000 2025] [:error] [pid 6201:tid 6207] [client 130.33.50.246:50213] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/nof.php"] [unique_id "aSdvNjkSJeRkIQGTjzwpRwAAAAI"]
[Thu Nov 27 05:20:54.923330 2025] [:error] [pid 21017:tid 21063] [client 130.33.50.246:50230] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test1.php"] [unique_id "aSdvNqZA663ub03MMQuRawAAAQQ"]
[Thu Nov 27 05:20:55.149668 2025] [:error] [pid 21017:tid 21069] [client 130.33.50.246:50214] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test1.php"] [unique_id "aSdvN6ZA663ub03MMQuRbAAAAQo"]
[Thu Nov 27 05:20:55.380493 2025] [:error] [pid 6203:tid 6277] [client 130.33.50.246:50220] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test1.php"] [unique_id "aSdvN8bdRL7aKyrgqyzOkAAAAJE"]
[Thu Nov 27 05:20:55.607311 2025] [:error] [pid 6290:tid 6309] [client 130.33.50.246:27175] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/test1.php"] [unique_id "aSdvN4qL4zye-zKr6sufRwAAAM8"]
[Thu Nov 27 05:20:55.835720 2025] [:error] [pid 6203:tid 6282] [client 130.33.50.246:50201] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unbalanceable.php"] [unique_id "aSdvN8bdRL7aKyrgqyzOkQAAAJY"]
[Thu Nov 27 05:20:56.064126 2025] [:error] [pid 6202:tid 6239] [client 130.33.50.246:49711] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unbalanceable.php"] [unique_id "aSdvONJa7NTP0XPyZ6lt2gAAAEY"]
[Thu Nov 27 05:20:56.295402 2025] [:error] [pid 6203:tid 6263] [client 130.33.50.246:27145] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unbalanceable.php"] [unique_id "aSdvOMbdRL7aKyrgqyzOlAAAAIM"]
[Thu Nov 27 05:20:56.523263 2025] [:error] [pid 21017:tid 21065] [client 130.33.50.246:27160] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/unbalanceable.php"] [unique_id "aSdvOKZA663ub03MMQuRbwAAAQY"]
[Thu Nov 27 05:20:56.751575 2025] [:error] [pid 6201:tid 6218] [client 130.33.50.246:49700] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSdvODkSJeRkIQGTjzwpSwAAAA0"]
[Thu Nov 27 05:20:56.981662 2025] [:error] [pid 6201:tid 6220] [client 130.33.50.246:27174] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSdvODkSJeRkIQGTjzwpTAAAAA8"]
[Thu Nov 27 05:20:57.209611 2025] [:error] [pid 6201:tid 6224] [client 130.33.50.246:27172] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSdvOTkSJeRkIQGTjzwpTQAAABM"]
[Thu Nov 27 05:20:57.451465 2025] [:error] [pid 6201:tid 6210] [client 130.33.50.246:26712] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSdvOTkSJeRkIQGTjzwpTgAAAAU"]
[Thu Nov 27 05:20:57.682682 2025] [:error] [pid 6290:tid 6306] [client 130.33.50.246:49707] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-advaced.php"] [unique_id "aSdvOYqL4zye-zKr6sufSQAAAMw"]
[Thu Nov 27 05:20:57.935925 2025] [:error] [pid 6201:tid 6219] [client 130.33.50.246:49669] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-advaced.php"] [unique_id "aSdvOTkSJeRkIQGTjzwpTwAAAA4"]
[Thu Nov 27 05:20:58.199642 2025] [:error] [pid 6201:tid 6229] [client 130.33.50.246:49716] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-advaced.php"] [unique_id "aSdvOjkSJeRkIQGTjzwpUAAAABg"]
[Thu Nov 27 05:20:58.426152 2025] [:error] [pid 6201:tid 6213] [client 130.33.50.246:27150] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/wp-advaced.php"] [unique_id "aSdvOjkSJeRkIQGTjzwpUQAAAAg"]
[Thu Nov 27 05:20:58.678110 2025] [:error] [pid 6201:tid 6215] [client 130.33.50.246:49672] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSdvOjkSJeRkIQGTjzwpUgAAAAo"]
[Thu Nov 27 05:20:58.907809 2025] [:error] [pid 6202:tid 6254] [client 130.33.50.246:27152] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSdvOtJa7NTP0XPyZ6lt3AAAAFU"]
[Thu Nov 27 05:20:59.135842 2025] [:error] [pid 6290:tid 6294] [client 130.33.50.246:49684] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSdvO4qL4zye-zKr6sufTQAAAMA"]
[Thu Nov 27 05:20:59.365467 2025] [:error] [pid 6202:tid 6244] [client 130.33.50.246:27178] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSdvO9Ja7NTP0XPyZ6lt3QAAAEs"]
[Thu Nov 27 05:20:59.602659 2025] [:error] [pid 6290:tid 6299] [client 130.33.50.246:50212] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abc.php"] [unique_id "aSdvO4qL4zye-zKr6sufTwAAAMU"]
[Thu Nov 27 05:20:59.829683 2025] [:error] [pid 21017:tid 21066] [client 130.33.50.246:26719] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abc.php"] [unique_id "aSdvO6ZA663ub03MMQuRcgAAAQc"]
[Thu Nov 27 05:21:00.085830 2025] [:error] [pid 21017:tid 21074] [client 130.33.50.246:49687] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abc.php"] [unique_id "aSdvPKZA663ub03MMQuRdAAAAQ8"]
[Thu Nov 27 05:21:00.317648 2025] [:error] [pid 21017:tid 21070] [client 130.33.50.246:27177] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/abc.php"] [unique_id "aSdvPKZA663ub03MMQuRdQAAAQs"]
[Thu Nov 27 05:21:00.545591 2025] [:error] [pid 6203:tid 6260] [client 130.33.50.246:27137] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/clss.php"] [unique_id "aSdvPMbdRL7aKyrgqyzOmgAAAIA"]
[Thu Nov 27 05:21:00.779460 2025] [:error] [pid 6290:tid 6300] [client 130.33.50.246:27159] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/clss.php"] [unique_id "aSdvPIqL4zye-zKr6sufUAAAAMY"]
[Thu Nov 27 05:21:01.008560 2025] [:error] [pid 21017:tid 21082] [client 130.33.50.246:50236] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/clss.php"] [unique_id "aSdvPaZA663ub03MMQuReQAAARc"]
[Thu Nov 27 05:21:01.239006 2025] [:error] [pid 21017:tid 21081] [client 130.33.50.246:27191] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/clss.php"] [unique_id "aSdvPaZA663ub03MMQuRegAAARY"]
[Thu Nov 27 05:21:01.465779 2025] [:error] [pid 21017:tid 21067] [client 130.33.50.246:27149] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/t.php"] [unique_id "aSdvPaZA663ub03MMQuRewAAAQg"]
[Thu Nov 27 05:21:01.693523 2025] [:error] [pid 21017:tid 21065] [client 130.33.50.246:50198] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/t.php"] [unique_id "aSdvPaZA663ub03MMQuRfgAAAQY"]
[Thu Nov 27 05:21:01.919759 2025] [:error] [pid 6201:tid 6214] [client 130.33.50.246:27165] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/t.php"] [unique_id "aSdvPTkSJeRkIQGTjzwpVgAAAAk"]
[Thu Nov 27 05:21:02.147502 2025] [:error] [pid 6201:tid 6225] [client 130.33.50.246:27188] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/t.php"] [unique_id "aSdvPjkSJeRkIQGTjzwpVwAAABQ"]
[Thu Nov 27 05:21:02.375005 2025] [:error] [pid 21017:tid 21072] [client 130.33.50.246:50190] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/d12.php"] [unique_id "aSdvPqZA663ub03MMQuRgAAAAQ0"]
[Thu Nov 27 05:21:02.609225 2025] [:error] [pid 6201:tid 6208] [client 130.33.50.246:27198] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/d12.php"] [unique_id "aSdvPjkSJeRkIQGTjzwpWAAAAAM"]
[Thu Nov 27 05:21:02.834903 2025] [:error] [pid 21017:tid 21071] [client 130.33.50.246:26723] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/d12.php"] [unique_id "aSdvPqZA663ub03MMQuRgQAAAQw"]
[Thu Nov 27 05:21:03.062928 2025] [:error] [pid 6202:tid 6236] [client 130.33.50.246:26689] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/d12.php"] [unique_id "aSdvP9Ja7NTP0XPyZ6lt4QAAAEM"]
[Thu Nov 27 05:21:03.292418 2025] [:error] [pid 6201:tid 6207] [client 130.33.50.246:27182] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/x.php"] [unique_id "aSdvPzkSJeRkIQGTjzwpWgAAAAI"]
[Thu Nov 27 05:21:03.519414 2025] [:error] [pid 21017:tid 21075] [client 130.33.50.246:50226] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/x.php"] [unique_id "aSdvP6ZA663ub03MMQuRjQAAARA"]
[Thu Nov 27 05:21:03.748410 2025] [:error] [pid 6203:tid 6282] [client 130.33.50.246:27143] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/x.php"] [unique_id "aSdvP8bdRL7aKyrgqyzOoQAAAJY"]
[Thu Nov 27 05:21:03.975641 2025] [:error] [pid 21017:tid 21063] [client 130.33.50.246:26700] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/x.php"] [unique_id "aSdvP6ZA663ub03MMQuRpgAAAQQ"]
[Thu Nov 27 05:21:04.201504 2025] [:error] [pid 6202:tid 6249] [client 130.33.50.246:50206] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/domains.php"] [unique_id "aSdvQNJa7NTP0XPyZ6lt4gAAAFA"]
[Thu Nov 27 05:21:04.436751 2025] [:error] [pid 6202:tid 6255] [client 130.33.50.246:27139] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/domains.php"] [unique_id "aSdvQNJa7NTP0XPyZ6lt5AAAAFY"]
[Thu Nov 27 05:21:04.667499 2025] [:error] [pid 6202:tid 6248] [client 130.33.50.246:49704] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/domains.php"] [unique_id "aSdvQNJa7NTP0XPyZ6lt5wAAAE8"]
[Thu Nov 27 05:21:04.897312 2025] [:error] [pid 6290:tid 6301] [client 130.33.50.246:49701] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/domains.php"] [unique_id "aSdvQIqL4zye-zKr6sufUwAAAMc"]
[Thu Nov 27 05:21:05.131943 2025] [:error] [pid 6202:tid 6241] [client 130.33.50.246:27153] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/zc-729.php"] [unique_id "aSdvQdJa7NTP0XPyZ6lt6AAAAEg"]
[Thu Nov 27 05:21:05.364149 2025] [:error] [pid 6203:tid 6270] [client 130.33.50.246:50196] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/zc-729.php"] [unique_id "aSdvQcbdRL7aKyrgqyzOqQAAAIo"]
[Thu Nov 27 05:21:05.590244 2025] [:error] [pid 6290:tid 6315] [client 130.33.50.246:26731] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/zc-729.php"] [unique_id "aSdvQYqL4zye-zKr6sufVAAAANU"]
[Thu Nov 27 05:21:05.824131 2025] [:error] [pid 6290:tid 6303] [client 130.33.50.246:50197] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/zc-729.php"] [unique_id "aSdvQYqL4zye-zKr6sufVgAAAMk"]
[Thu Nov 27 05:21:06.050758 2025] [:error] [pid 6290:tid 6317] [client 130.33.50.246:49705] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/sx.php"] [unique_id "aSdvQoqL4zye-zKr6sufWAAAANc"]
[Thu Nov 27 05:21:06.286751 2025] [:error] [pid 6203:tid 6269] [client 130.33.50.246:49727] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/sx.php"] [unique_id "aSdvQsbdRL7aKyrgqyzOrgAAAIk"]
[Thu Nov 27 05:21:06.515711 2025] [:error] [pid 6290:tid 6316] [client 130.33.50.246:26738] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/sx.php"] [unique_id "aSdvQoqL4zye-zKr6sufWQAAANY"]
[Thu Nov 27 05:21:06.744829 2025] [:error] [pid 6290:tid 6306] [client 130.33.50.246:50229] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/sx.php"] [unique_id "aSdvQoqL4zye-zKr6sufWwAAAMw"]
[Thu Nov 27 05:21:06.974755 2025] [:error] [pid 6202:tid 6251] [client 130.33.50.246:27140] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ww1.php"] [unique_id "aSdvQtJa7NTP0XPyZ6lt6QAAAFI"]
[Thu Nov 27 05:21:07.203319 2025] [:error] [pid 6202:tid 6243] [client 130.33.50.246:49681] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ww1.php"] [unique_id "aSdvQ9Ja7NTP0XPyZ6lt7AAAAEo"]
[Thu Nov 27 05:21:07.435626 2025] [:error] [pid 6290:tid 6296] [client 130.33.50.246:27176] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ww1.php"] [unique_id "aSdvQ4qL4zye-zKr6sufXgAAAMI"]
[Thu Nov 27 05:21:07.665353 2025] [:error] [pid 6202:tid 6233] [client 130.33.50.246:26745] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ww1.php"] [unique_id "aSdvQ9Ja7NTP0XPyZ6lt7wAAAEA"]
[Thu Nov 27 05:21:07.892307 2025] [:error] [pid 21017:tid 21079] [client 130.33.50.246:50225] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/goods.php"] [unique_id "aSdvQ6ZA663ub03MMQuR0wAAARQ"]
[Thu Nov 27 05:21:08.119203 2025] [:error] [pid 21017:tid 21062] [client 130.33.50.246:27180] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/goods.php"] [unique_id "aSdvRKZA663ub03MMQuR1AAAAQM"]
[Thu Nov 27 05:21:08.347435 2025] [:error] [pid 6202:tid 6252] [client 130.33.50.246:49696] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/goods.php"] [unique_id "aSdvRNJa7NTP0XPyZ6lt9QAAAFM"]
[Thu Nov 27 05:21:08.574660 2025] [:error] [pid 6201:tid 6229] [client 130.33.50.246:27166] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/goods.php"] [unique_id "aSdvRDkSJeRkIQGTjzwpYAAAABg"]
[Thu Nov 27 05:21:08.802621 2025] [:error] [pid 6202:tid 6248] [client 130.33.50.246:26722] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/s.php"] [unique_id "aSdvRNJa7NTP0XPyZ6lt9wAAAE8"]
[Thu Nov 27 05:21:09.033510 2025] [:error] [pid 6202:tid 6241] [client 130.33.50.246:26721] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/s.php"] [unique_id "aSdvRdJa7NTP0XPyZ6lt-AAAAEg"]
[Thu Nov 27 05:21:09.271909 2025] [:error] [pid 6290:tid 6318] [client 130.33.50.246:50189] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/s.php"] [unique_id "aSdvRYqL4zye-zKr6sufYgAAANg"]
[Thu Nov 27 05:21:09.505393 2025] [:error] [pid 6203:tid 6277] [client 130.33.50.246:27193] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/s.php"] [unique_id "aSdvRcbdRL7aKyrgqyzOswAAAJE"]
[Thu Nov 27 05:21:09.745028 2025] [:error] [pid 21017:tid 21065] [client 130.33.50.246:27164] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gecko.php"] [unique_id "aSdvRaZA663ub03MMQuR2wAAAQY"]
[Thu Nov 27 05:21:09.979503 2025] [:error] [pid 21017:tid 21062] [client 130.33.50.246:27179] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gecko.php"] [unique_id "aSdvRaZA663ub03MMQuR3AAAAQM"]
[Thu Nov 27 05:21:10.213402 2025] [:error] [pid 6290:tid 6304] [client 130.33.50.246:27156] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gecko.php"] [unique_id "aSdvRoqL4zye-zKr6sufYwAAAMo"]
[Thu Nov 27 05:21:10.453491 2025] [:error] [pid 6202:tid 6251] [client 130.33.50.246:50232] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/gecko.php"] [unique_id "aSdvRtJa7NTP0XPyZ6lt_AAAAFI"]
[Thu Nov 27 07:28:48.176978 2025] [:error] [pid 11332:tid 11395] [client 159.65.144.72:39514] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/v2/api-docs"] [unique_id "aSeNMAdwxFvT7a-DQjOeYQAAAEs"]
[Thu Nov 27 07:28:48.488664 2025] [:error] [pid 11332:tid 11388] [client 159.65.144.72:39524] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/v3/api-docs"] [unique_id "aSeNMAdwxFvT7a-DQjOeawAAAEQ"]
[Thu Nov 27 07:28:48.781544 2025] [:error] [pid 11332:tid 11392] [client 159.65.144.72:39532] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aSeNMAdwxFvT7a-DQjOecQAAAEg"]
[Thu Nov 27 07:28:49.102670 2025] [:error] [pid 11488:tid 11521] [client 159.65.144.72:39536] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/api/swagger.json"] [unique_id "aSeNMZizcrrnZYNumua8dwAAAYI"]
[Thu Nov 27 07:28:49.423079 2025] [:error] [pid 11332:tid 11387] [client 159.65.144.72:39542] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/@vite/env"] [unique_id "aSeNMQdwxFvT7a-DQjOefAAAAEM"]
[Thu Nov 27 07:28:49.715329 2025] [:error] [pid 11332:tid 11395] [client 159.65.144.72:39558] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/actuator/env"] [unique_id "aSeNMQdwxFvT7a-DQjOefgAAAEs"]
[Thu Nov 27 07:28:50.058319 2025] [:error] [pid 11487:tid 11497] [client 159.65.144.72:39572] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/server"] [unique_id "aSeNMsAEJJlNliCT29mn6QAAAQU"]
[Thu Nov 27 07:28:50.400841 2025] [:error] [pid 11487:tid 11498] [client 159.65.144.72:39576] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSeNMsAEJJlNliCT29mn6gAAAQY"]
[Thu Nov 27 07:28:50.749695 2025] [:error] [pid 11487:tid 11499] [client 159.65.144.72:39582] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/about"] [unique_id "aSeNMsAEJJlNliCT29mn6wAAAQc"]
[Thu Nov 27 07:28:51.073115 2025] [:error] [pid 11332:tid 11392] [client 159.65.144.72:39588] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/debug/default/view"] [unique_id "aSeNMwdwxFvT7a-DQjOekgAAAEg"]
[Thu Nov 27 07:28:51.212847 2025] [:error] [pid 11676:tid 11742] [client 167.172.158.128:60056] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/v2/api-docs"] [unique_id "aSeNM9faeHt313Ts2HIjEAAAAIM"]
[Thu Nov 27 07:28:51.337953 2025] [:error] [pid 11676:tid 11743] [client 159.65.144.72:39600] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/v2/_catalog"] [unique_id "aSeNM9faeHt313Ts2HIjEQAAAIQ"]
[Thu Nov 27 07:28:51.630450 2025] [:error] [pid 11676:tid 11746] [client 167.172.158.128:37140] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/v3/api-docs"] [unique_id "aSeNM9faeHt313Ts2HIjEwAAAIc"]
[Thu Nov 27 07:28:51.630536 2025] [:error] [pid 11488:tid 11524] [client 159.65.144.72:39608] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSeNM5izcrrnZYNumua8eQAAAYU"]
[Thu Nov 27 07:28:51.936451 2025] [:error] [pid 11332:tid 11389] [client 159.65.144.72:39620] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/server-status"] [unique_id "aSeNMwdwxFvT7a-DQjOengAAAEU"]
[Thu Nov 27 07:28:52.047760 2025] [:error] [pid 11488:tid 11529] [client 167.172.158.128:37144] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aSeNNJizcrrnZYNumua8fQAAAYo"]
[Thu Nov 27 07:28:52.214333 2025] [:error] [pid 11488:tid 11531] [client 159.65.144.72:39628] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/login.action"] [unique_id "aSeNNJizcrrnZYNumua8fwAAAYw"]
[Thu Nov 27 07:28:52.464850 2025] [:error] [pid 11332:tid 11404] [client 167.172.158.128:37158] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/api/swagger.json"] [unique_id "aSeNNAdwxFvT7a-DQjOeogAAAFQ"]
[Thu Nov 27 07:28:52.494732 2025] [:error] [pid 11487:tid 11505] [client 159.65.144.72:39636] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/_all_dbs"] [unique_id "aSeNNMAEJJlNliCT29mn7wAAAQ0"]
[Thu Nov 27 07:28:52.772445 2025] [:error] [pid 11487:tid 11507] [client 159.65.144.72:39642] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/.DS_Store"] [unique_id "aSeNNMAEJJlNliCT29mn8QAAAQ8"]
[Thu Nov 27 07:28:52.881058 2025] [:error] [pid 11676:tid 11748] [client 167.172.158.128:37172] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/@vite/env"] [unique_id "aSeNNNfaeHt313Ts2HIjFQAAAIk"]
[Thu Nov 27 07:28:53.036743 2025] [:error] [pid 11487:tid 11509] [client 159.65.144.72:39654] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.env"] [unique_id "aSeNNcAEJJlNliCT29mn8gAAARE"]
[Thu Nov 27 07:28:53.292411 2025] [:error] [pid 11488:tid 11519] [client 167.172.158.128:37174] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/actuator/env"] [unique_id "aSeNNZizcrrnZYNumua8hwAAAYA"]
[Thu Nov 27 07:28:53.301365 2025] [:error] [pid 11487:tid 11510] [client 159.65.144.72:39662] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSeNNcAEJJlNliCT29mn8wAAARI"]
[Thu Nov 27 07:28:53.580699 2025] [:error] [pid 11487:tid 11511] [client 159.65.144.72:39672] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSeNNcAEJJlNliCT29mn9AAAARM"]
[Thu Nov 27 07:28:53.705114 2025] [:error] [pid 11488:tid 11525] [client 167.172.158.128:37190] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/server"] [unique_id "aSeNNZizcrrnZYNumua8jQAAAYY"]
[Thu Nov 27 07:28:53.858559 2025] [:error] [pid 11676:tid 11750] [client 159.65.144.72:39678] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/config.json"] [unique_id "aSeNNdfaeHt313Ts2HIjFgAAAIs"]
[Thu Nov 27 07:28:54.115920 2025] [:error] [pid 11676:tid 11751] [client 167.172.158.128:37192] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSeNNtfaeHt313Ts2HIjGAAAAIw"]
[Thu Nov 27 07:28:54.127149 2025] [:error] [pid 11488:tid 11530] [client 159.65.144.72:39686] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/telescope/requests"] [unique_id "aSeNNpizcrrnZYNumua8kAAAAYs"]
[Thu Nov 27 07:28:54.393309 2025] [:error] [pid 11488:tid 11532] [client 159.65.144.72:39690] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/info.php"] [unique_id "aSeNNpizcrrnZYNumua8kQAAAY0"]
[Thu Nov 27 07:28:54.527022 2025] [:error] [pid 11487:tid 11513] [client 167.172.158.128:37204] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/about"] [unique_id "aSeNNsAEJJlNliCT29mn9gAAARU"]
[Thu Nov 27 07:28:54.658031 2025] [:error] [pid 11488:tid 11535] [client 159.65.144.72:44350] [client 159.65.144.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "aircraft-spruce.com.au"] [uri "/"] [unique_id "aSeNNpizcrrnZYNumua8lAAAAZA"]
[Thu Nov 27 07:28:54.940008 2025] [:error] [pid 11332:tid 11386] [client 167.172.158.128:37212] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/debug/default/view"] [unique_id "aSeNNgdwxFvT7a-DQjOerQAAAEI"]
[Thu Nov 27 07:28:55.356963 2025] [:error] [pid 11487:tid 11515] [client 167.172.158.128:37220] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/v2/_catalog"] [unique_id "aSeNN8AEJJlNliCT29mn9wAAARc"]
[Thu Nov 27 07:28:55.771540 2025] [:error] [pid 11488:tid 11521] [client 167.172.158.128:37228] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSeNN5izcrrnZYNumua8mAAAAYI"]
[Thu Nov 27 07:28:56.183151 2025] [:error] [pid 11676:tid 11759] [client 167.172.158.128:37234] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/server-status"] [unique_id "aSeNONfaeHt313Ts2HIjHwAAAJQ"]
[Thu Nov 27 07:28:56.594644 2025] [:error] [pid 11332:tid 11402] [client 167.172.158.128:37250] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/login.action"] [unique_id "aSeNOAdwxFvT7a-DQjOeuAAAAFI"]
[Thu Nov 27 07:29:00.776484 2025] [:error] [pid 16377:tid 16740] [client 167.172.158.128:37256] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/_all_dbs"] [unique_id "aSeNPNMPpzKut6cIBdxtCQAAAEc"]
[Thu Nov 27 07:29:00.790824 2025] [:error] [pid 16377:tid 16736] [client 167.172.158.128:37262] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/.DS_Store"] [unique_id "aSeNPNMPpzKut6cIBdxtFQAAAEM"]
[Thu Nov 27 07:29:01.207719 2025] [:error] [pid 16432:tid 16810] [client 167.172.158.128:37272] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.env"] [unique_id "aSeNPc6cRsTt0Hw5Bh207QAAAYA"]
[Thu Nov 27 07:29:01.627231 2025] [:error] [pid 16976:tid 17000] [client 167.172.158.128:56192] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aircraft-spruce.com.au"] [uri "/.git/config"] [unique_id "aSeNPZdZWg8qyTbtI6LSKgAAAAA"]
[Thu Nov 27 07:29:02.044710 2025] [:error] [pid 16976:tid 17004] [client 167.172.158.128:56202] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSeNPpdZWg8qyTbtI6LSLgAAAAQ"]
[Thu Nov 27 07:29:02.461841 2025] [:error] [pid 16432:tid 16820] [client 167.172.158.128:56216] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/config.json"] [unique_id "aSeNPs6cRsTt0Hw5Bh209wAAAYo"]
[Thu Nov 27 07:29:06.306515 2025] [:error] [pid 19010:tid 19021] [client 167.172.158.128:56222] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/telescope/requests"] [unique_id "aSeNQvv6iq0GzfGBcn16eAAAAMM"]
[Thu Nov 27 07:29:06.320130 2025] [:error] [pid 19010:tid 19023] [client 167.172.158.128:56232] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/info.php"] [unique_id "aSeNQvv6iq0GzfGBcn16gQAAAMU"]
[Thu Nov 27 07:29:06.732792 2025] [:error] [pid 19010:tid 19039] [client 167.172.158.128:56240] [client 167.172.158.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.aircraft-spruce.com.au"] [uri "/"] [unique_id "aSeNQvv6iq0GzfGBcn16jgAAANU"]
[Thu Apr 16 01:43:30.639667 2026] [ssl:warn] [pid 4016:tid 4016] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 01:43:30.639707 2026] [ssl:warn] [pid 4016:tid 4016] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:29:41.205176 2026] [ssl:warn] [pid 52554:tid 52554] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:29:41.205202 2026] [ssl:warn] [pid 52554:tid 52554] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:29:43.179174 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:29:43.179202 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:08.236176 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:08.236202 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:23.349121 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:23.349149 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:30.321773 2026] [ssl:warn] [pid 53231:tid 53231] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:30.321799 2026] [ssl:warn] [pid 53231:tid 53231] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:32.377329 2026] [ssl:warn] [pid 53237:tid 53237] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:32.377358 2026] [ssl:warn] [pid 53237:tid 53237] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:41:23.014414 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:41:23.014443 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:41:25.003080 2026] [ssl:warn] [pid 26973:tid 26973] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:41:25.003112 2026] [ssl:warn] [pid 26973:tid 26973] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:47:59.141041 2026] [ssl:warn] [pid 57468:tid 57468] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:47:59.141070 2026] [ssl:warn] [pid 57468:tid 57468] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:48:01.210631 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:48:01.210661 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 00:03:17.468754 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 00:03:17.468780 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:41.486055 2026] [ssl:warn] [pid 5220:tid 5220] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:41.486082 2026] [ssl:warn] [pid 5220:tid 5220] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:43.495972 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:43.496003 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:53.694337 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:53.694363 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:02.568865 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:02.568901 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:13.401470 2026] [ssl:warn] [pid 5809:tid 5809] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:13.401496 2026] [ssl:warn] [pid 5809:tid 5809] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:15.410681 2026] [ssl:warn] [pid 5815:tid 5815] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:15.410706 2026] [ssl:warn] [pid 5815:tid 5815] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:46.292460 2026] [ssl:warn] [pid 43721:tid 43721] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:46.292487 2026] [ssl:warn] [pid 43721:tid 43721] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:48.307136 2026] [ssl:warn] [pid 43725:tid 43725] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:48.307178 2026] [ssl:warn] [pid 43725:tid 43725] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:47.015878 2026] [ssl:warn] [pid 9098:tid 9098] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:47.015878 2026] [ssl:warn] [pid 9098:tid 9098] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:49.068511 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:49.068535 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 00:02:18.879556 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 00:02:18.879582 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:41.926753 2026] [ssl:warn] [pid 6452:tid 6452] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:41.926787 2026] [ssl:warn] [pid 6452:tid 6452] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:43.908366 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:43.908393 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:56.302193 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:56.302217 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:05.244867 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:05.244893 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:14.041202 2026] [ssl:warn] [pid 7034:tid 7034] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:14.041227 2026] [ssl:warn] [pid 7034:tid 7034] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:16.055201 2026] [ssl:warn] [pid 7037:tid 7037] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:16.055268 2026] [ssl:warn] [pid 7037:tid 7037] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:31.999174 2026] [ssl:warn] [pid 44741:tid 44741] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:31.999200 2026] [ssl:warn] [pid 44741:tid 44741] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:33.996057 2026] [ssl:warn] [pid 44746:tid 44746] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:33.996082 2026] [ssl:warn] [pid 44746:tid 44746] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:56.223951 2026] [ssl:warn] [pid 9807:tid 9807] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:56.223978 2026] [ssl:warn] [pid 9807:tid 9807] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:58.263061 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:58.263086 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 00:02:32.056982 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 00:02:32.057012 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:50.408947 2026] [ssl:warn] [pid 39407:tid 39407] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:50.408969 2026] [ssl:warn] [pid 39407:tid 39407] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:52.446677 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:52.446705 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:07.909858 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:07.909886 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:17.826003 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:17.826029 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:28.674011 2026] [ssl:warn] [pid 40069:tid 40069] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:28.674027 2026] [ssl:warn] [pid 40069:tid 40069] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:30.741220 2026] [ssl:warn] [pid 40072:tid 40072] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:30.741274 2026] [ssl:warn] [pid 40072:tid 40072] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:08.179833 2026] [ssl:warn] [pid 17392:tid 17392] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:08.179862 2026] [ssl:warn] [pid 17392:tid 17392] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:10.196633 2026] [ssl:warn] [pid 17394:tid 17394] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:10.196658 2026] [ssl:warn] [pid 17394:tid 17394] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:45.259879 2026] [ssl:warn] [pid 47724:tid 47724] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:45.259907 2026] [ssl:warn] [pid 47724:tid 47724] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:47.318917 2026] [ssl:warn] [pid 47728:tid 47728] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:47.318943 2026] [ssl:warn] [pid 47728:tid 47728] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:52.689269 2026] [ssl:warn] [pid 61391:tid 61391] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:52.689297 2026] [ssl:warn] [pid 61391:tid 61391] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:54.712315 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:54.712334 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:11.463609 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:11.463648 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:20.856612 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:20.856640 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:29.756689 2026] [ssl:warn] [pid 62018:tid 62018] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:29.756715 2026] [ssl:warn] [pid 62018:tid 62018] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:31.737491 2026] [ssl:warn] [pid 62020:tid 62020] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:31.737519 2026] [ssl:warn] [pid 62020:tid 62020] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:14.338179 2026] [ssl:warn] [pid 34210:tid 34210] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:14.338204 2026] [ssl:warn] [pid 34210:tid 34210] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:16.365220 2026] [ssl:warn] [pid 34213:tid 34213] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:16.365284 2026] [ssl:warn] [pid 34213:tid 34213] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:48.871862 2026] [ssl:warn] [pid 64283:tid 64283] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:48.871889 2026] [ssl:warn] [pid 64283:tid 64283] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:50.936014 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:50.936054 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 10:09:52.926201 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 10:09:52.926229 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:53.951693 2026] [ssl:warn] [pid 31929:tid 31929] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:53.951720 2026] [ssl:warn] [pid 31929:tid 31929] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:55.992602 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:55.992628 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:11.187680 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:11.187705 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:21.054992 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:21.055019 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:27.011825 2026] [ssl:warn] [pid 32501:tid 32501] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:27.011863 2026] [ssl:warn] [pid 32501:tid 32501] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:29.097089 2026] [ssl:warn] [pid 32504:tid 32504] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:29.097115 2026] [ssl:warn] [pid 32504:tid 32504] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:47.322926 2026] [ssl:warn] [pid 4901:tid 4901] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:47.322962 2026] [ssl:warn] [pid 4901:tid 4901] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:49.377503 2026] [ssl:warn] [pid 4903:tid 4903] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:49.377530 2026] [ssl:warn] [pid 4903:tid 4903] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:05.746034 2026] [ssl:warn] [pid 35237:tid 35237] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:05.746060 2026] [ssl:warn] [pid 35237:tid 35237] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:07.891126 2026] [ssl:warn] [pid 35263:tid 35263] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:07.891152 2026] [ssl:warn] [pid 35263:tid 35263] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:46.093073 2026] [ssl:warn] [pid 17978:tid 17978] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:46.093099 2026] [ssl:warn] [pid 17978:tid 17978] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:48.225021 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:48.225058 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:03.472290 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:03.472300 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:13.002162 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:13.002189 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:19.908159 2026] [ssl:warn] [pid 18567:tid 18567] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:19.908202 2026] [ssl:warn] [pid 18567:tid 18567] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:22.016154 2026] [ssl:warn] [pid 18569:tid 18569] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:22.016181 2026] [ssl:warn] [pid 18569:tid 18569] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:31.378540 2026] [ssl:warn] [pid 56393:tid 56393] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:31.378580 2026] [ssl:warn] [pid 56393:tid 56393] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:33.436545 2026] [ssl:warn] [pid 56397:tid 56397] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:33.436571 2026] [ssl:warn] [pid 56397:tid 56397] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:03.534518 2026] [ssl:warn] [pid 21632:tid 21632] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:03.534545 2026] [ssl:warn] [pid 21632:tid 21632] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:05.622528 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:05.622554 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 13:25:49.489959 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 13:25:49.489987 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:44.893549 2026] [ssl:warn] [pid 39499:tid 39499] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:44.893576 2026] [ssl:warn] [pid 39499:tid 39499] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:46.930624 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:46.930649 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:04.285705 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:04.285746 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:13.582162 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:13.582188 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:27.602346 2026] [ssl:warn] [pid 40150:tid 40150] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:27.602380 2026] [ssl:warn] [pid 40150:tid 40150] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:29.646261 2026] [ssl:warn] [pid 40153:tid 40153] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:29.646307 2026] [ssl:warn] [pid 40153:tid 40153] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:42.076917 2026] [ssl:warn] [pid 12710:tid 12710] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:42.076917 2026] [ssl:warn] [pid 12710:tid 12710] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:44.093728 2026] [ssl:warn] [pid 12712:tid 12712] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:44.093754 2026] [ssl:warn] [pid 12712:tid 12712] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:19.923412 2026] [ssl:warn] [pid 42921:tid 42921] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:19.923440 2026] [ssl:warn] [pid 42921:tid 42921] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:21.898572 2026] [ssl:warn] [pid 42923:tid 42923] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:21.898607 2026] [ssl:warn] [pid 42923:tid 42923] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:45.694694 2026] [ssl:warn] [pid 14987:tid 14987] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:45.694720 2026] [ssl:warn] [pid 14987:tid 14987] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:47.817938 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:47.817964 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:59.881844 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:59.881869 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:09.652193 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:09.652231 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:15.646768 2026] [ssl:warn] [pid 15609:tid 15609] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:15.646794 2026] [ssl:warn] [pid 15609:tid 15609] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:17.725130 2026] [ssl:warn] [pid 15624:tid 15624] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:17.725145 2026] [ssl:warn] [pid 15624:tid 15624] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:37.054070 2026] [ssl:warn] [pid 53619:tid 53619] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:37.054099 2026] [ssl:warn] [pid 53619:tid 53619] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:39.147152 2026] [ssl:warn] [pid 53622:tid 53622] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:39.147179 2026] [ssl:warn] [pid 53622:tid 53622] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:34.378838 2026] [ssl:warn] [pid 19045:tid 19045] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:34.378864 2026] [ssl:warn] [pid 19045:tid 19045] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:36.486503 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:36.486530 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:10.275714 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:10.275742 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:39.449363 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:39.449389 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:14:57.255402 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:14:57.255430 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:04.081400 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:04.081434 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:15.427347 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:15.427384 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:41.299018 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:41.299047 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:16:05.691542 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:16:05.691569 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 00:01:49.597941 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 00:01:49.597968 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:25:48.732814 2026] [ssl:warn] [pid 40059:tid 40059] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:48.732861 2026] [ssl:warn] [pid 40059:tid 40059] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:25:50.736706 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:50.736730 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:05.956332 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:05.956376 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:15.256073 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:15.256098 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:29.112580 2026] [ssl:warn] [pid 40674:tid 40674] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:29.112608 2026] [ssl:warn] [pid 40674:tid 40674] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:31.126423 2026] [ssl:warn] [pid 40686:tid 40686] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:31.126454 2026] [ssl:warn] [pid 40686:tid 40686] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:02.337528 2026] [ssl:warn] [pid 13515:tid 13515] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:02.337557 2026] [ssl:warn] [pid 13515:tid 13515] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:04.438113 2026] [ssl:warn] [pid 13525:tid 13525] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:04.438141 2026] [ssl:warn] [pid 13525:tid 13525] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:47.325111 2026] [ssl:warn] [pid 44265:tid 44265] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:47.325137 2026] [ssl:warn] [pid 44265:tid 44265] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:49.414000 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:49.414031 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 17:02:14.757644 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 17:02:14.757685 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 18:02:18.003391 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 18:02:18.003391 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:11.934586 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:11.934621 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:35.074562 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:35.074589 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:45.768694 2026] [ssl:warn] [pid 63345:tid 63345] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:45.768722 2026] [ssl:warn] [pid 63345:tid 63345] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:47.770402 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:47.770428 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:01.592609 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:01.592634 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:11.438087 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:11.438113 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:18.273147 2026] [ssl:warn] [pid 64047:tid 64047] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:18.273183 2026] [ssl:warn] [pid 64047:tid 64047] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:20.293767 2026] [ssl:warn] [pid 64050:tid 64050] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:20.293797 2026] [ssl:warn] [pid 64050:tid 64050] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:38.520092 2026] [ssl:warn] [pid 42994:tid 42994] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:38.520123 2026] [ssl:warn] [pid 42994:tid 42994] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:40.521152 2026] [ssl:warn] [pid 43001:tid 43001] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:40.521177 2026] [ssl:warn] [pid 43001:tid 43001] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:17.153641 2026] [ssl:warn] [pid 8334:tid 8334] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:17.153668 2026] [ssl:warn] [pid 8334:tid 8334] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:19.151345 2026] [ssl:warn] [pid 8338:tid 8338] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:19.151386 2026] [ssl:warn] [pid 8338:tid 8338] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:43.754435 2026] [ssl:warn] [pid 19503:tid 19503] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:43.754464 2026] [ssl:warn] [pid 19503:tid 19503] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:45.780198 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:45.780272 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:01.064318 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:01.064344 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:09.740806 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:09.740831 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:16.513262 2026] [ssl:warn] [pid 20092:tid 20092] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:16.513305 2026] [ssl:warn] [pid 20092:tid 20092] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:18.518017 2026] [ssl:warn] [pid 20096:tid 20096] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:18.518043 2026] [ssl:warn] [pid 20096:tid 20096] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:44.078842 2026] [ssl:warn] [pid 57619:tid 57619] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:44.078872 2026] [ssl:warn] [pid 57619:tid 57619] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:46.105947 2026] [ssl:warn] [pid 57624:tid 57624] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:46.105974 2026] [ssl:warn] [pid 57624:tid 57624] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:15.177789 2026] [ssl:warn] [pid 22590:tid 22590] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:15.177818 2026] [ssl:warn] [pid 22590:tid 22590] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:17.218561 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:17.218598 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:15.387733 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:15.387761 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:30.104503 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:30.104529 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:50:25.167095 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:50:25.167121 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 09:00:41.497150 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 09:00:41.497176 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 11:48:09.625775 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 11:48:09.625802 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 12:10:34.389517 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 12:10:34.389544 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:30:04.750473 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:30:04.750500 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:31:10.421912 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:31:10.421938 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:47:46.538607 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:47:46.538634 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:01.739943 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:01.739981 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:16.615462 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:16.615489 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 20:13:26.809764 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 20:13:26.809792 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:50.008399 2026] [ssl:warn] [pid 11313:tid 11313] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:50.008441 2026] [ssl:warn] [pid 11313:tid 11313] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:51.976320 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:51.976345 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:05.919554 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:05.919578 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:15.088122 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:15.088150 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:21.358837 2026] [ssl:warn] [pid 11875:tid 11875] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:21.358865 2026] [ssl:warn] [pid 11875:tid 11875] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:23.707263 2026] [ssl:warn] [pid 11880:tid 11880] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:23.707291 2026] [ssl:warn] [pid 11880:tid 11880] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:54.612609 2026] [ssl:warn] [pid 49430:tid 49430] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:54.612634 2026] [ssl:warn] [pid 49430:tid 49430] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:56.551997 2026] [ssl:warn] [pid 49433:tid 49433] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:56.552023 2026] [ssl:warn] [pid 49433:tid 49433] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:31.152532 2026] [ssl:warn] [pid 14505:tid 14505] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:31.152559 2026] [ssl:warn] [pid 14505:tid 14505] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:33.057572 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:33.057596 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:05:40.884087 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:05:40.884114 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:06:05.854348 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:06:05.854375 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:15:30.483073 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:15:30.483097 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:22:26.113859 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:22:26.113884 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:46.597328 2026] [ssl:warn] [pid 53686:tid 53686] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:46.597354 2026] [ssl:warn] [pid 53686:tid 53686] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:48.588650 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:48.588686 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:57.429109 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:57.429136 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:06.725699 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:06.725726 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:14.527328 2026] [ssl:warn] [pid 54234:tid 54234] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:14.527353 2026] [ssl:warn] [pid 54234:tid 54234] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:16.488755 2026] [ssl:warn] [pid 54236:tid 54236] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:16.488782 2026] [ssl:warn] [pid 54236:tid 54236] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:40.157772 2026] [ssl:warn] [pid 26584:tid 26584] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:40.157799 2026] [ssl:warn] [pid 26584:tid 26584] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:42.096692 2026] [ssl:warn] [pid 26587:tid 26587] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:42.096719 2026] [ssl:warn] [pid 26587:tid 26587] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:17.165595 2026] [ssl:warn] [pid 56683:tid 56683] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:17.165623 2026] [ssl:warn] [pid 56683:tid 56683] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:19.139042 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:19.139082 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:37:12.328289 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:37:12.328317 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:38:04.720747 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:38:04.720775 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 09:49:16.973867 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 09:49:16.973893 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 10:16:51.353224 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 10:16:51.353285 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:12.377733 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:12.377774 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:24.924322 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:24.924348 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:37.264965 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:37.264991 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:07.024997 2026] [ssl:warn] [pid 14108:tid 14108] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:07.025026 2026] [ssl:warn] [pid 14108:tid 14108] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:09.030828 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:09.030853 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:23.224533 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:23.224561 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:32.400390 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:32.400426 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:39.302135 2026] [ssl:warn] [pid 14745:tid 14745] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:39.302150 2026] [ssl:warn] [pid 14745:tid 14745] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:41.248406 2026] [ssl:warn] [pid 14747:tid 14747] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:41.248434 2026] [ssl:warn] [pid 14747:tid 14747] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:07.419830 2026] [ssl:warn] [pid 52781:tid 52781] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:07.419860 2026] [ssl:warn] [pid 52781:tid 52781] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:09.373056 2026] [ssl:warn] [pid 52785:tid 52785] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:09.373082 2026] [ssl:warn] [pid 52785:tid 52785] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:52.519358 2026] [ssl:warn] [pid 18059:tid 18059] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:52.519386 2026] [ssl:warn] [pid 18059:tid 18059] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:54.509350 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:54.509372 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 16:30:14.155027 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 16:30:14.155055 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:47:53.120705 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:47:53.120734 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:53:10.732551 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:53:10.732579 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:54:02.236296 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:54:02.236325 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:55:51.019495 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:55:51.019529 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:56:35.601330 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:56:35.601390 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:00.508992 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:00.509032 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:36.203128 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:36.203156 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:03:32.678065 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:03:32.678092 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:04:02.964509 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:04:02.964537 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:05:34.793327 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:05:34.793355 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:06:03.249751 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:06:03.249777 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:51.941520 2026] [ssl:warn] [pid 11075:tid 11075] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:51.941550 2026] [ssl:warn] [pid 11075:tid 11075] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:53.904119 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:53.904148 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:07.114920 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:07.114945 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:16.257687 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:16.257726 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:29.191599 2026] [ssl:warn] [pid 11656:tid 11656] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:29.191628 2026] [ssl:warn] [pid 11656:tid 11656] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:31.192994 2026] [ssl:warn] [pid 11658:tid 11658] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:31.193019 2026] [ssl:warn] [pid 11658:tid 11658] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:17.593635 2026] [ssl:warn] [pid 7543:tid 7543] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:17.593662 2026] [ssl:warn] [pid 7543:tid 7543] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:19.598842 2026] [ssl:warn] [pid 7549:tid 7549] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:19.598869 2026] [ssl:warn] [pid 7549:tid 7549] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:03.744992 2026] [ssl:warn] [pid 37959:tid 37959] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:03.744992 2026] [ssl:warn] [pid 37959:tid 37959] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:05.730516 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:05.730554 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:29:08.364751 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:29:08.364806 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:32:17.142206 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:32:17.142283 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:49.947760 2026] [ssl:warn] [pid 55782:tid 55782] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:49.947785 2026] [ssl:warn] [pid 55782:tid 55782] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:51.861769 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:51.861795 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:09.222001 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:09.222028 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:18.241761 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:18.241790 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:26.160879 2026] [ssl:warn] [pid 56401:tid 56401] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:26.160915 2026] [ssl:warn] [pid 56401:tid 56401] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:28.049014 2026] [ssl:warn] [pid 56404:tid 56404] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:28.049039 2026] [ssl:warn] [pid 56404:tid 56404] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:44.663474 2026] [ssl:warn] [pid 22691:tid 22691] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:44.663501 2026] [ssl:warn] [pid 22691:tid 22691] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:46.574820 2026] [ssl:warn] [pid 22694:tid 22694] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:46.574845 2026] [ssl:warn] [pid 22694:tid 22694] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:05.008005 2026] [ssl:warn] [pid 53374:tid 53374] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:05.008036 2026] [ssl:warn] [pid 53374:tid 53374] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:06.929194 2026] [ssl:warn] [pid 53383:tid 53383] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:06.929243 2026] [ssl:warn] [pid 53383:tid 53383] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:55.151173 2026] [ssl:warn] [pid 31819:tid 31819] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:55.151201 2026] [ssl:warn] [pid 31819:tid 31819] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:57.150647 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:57.150676 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:05.007497 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:05.007525 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:14.475961 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:14.475987 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:28.504803 2026] [ssl:warn] [pid 32490:tid 32490] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:28.504831 2026] [ssl:warn] [pid 32490:tid 32490] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:30.463632 2026] [ssl:warn] [pid 32493:tid 32493] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:30.463659 2026] [ssl:warn] [pid 32493:tid 32493] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:25.646550 2026] [ssl:warn] [pid 10238:tid 10238] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:25.646590 2026] [ssl:warn] [pid 10238:tid 10238] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:27.667556 2026] [ssl:warn] [pid 10241:tid 10241] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:27.667582 2026] [ssl:warn] [pid 10241:tid 10241] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:00.927590 2026] [ssl:warn] [pid 40572:tid 40572] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:00.927618 2026] [ssl:warn] [pid 40572:tid 40572] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:02.919935 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:02.919970 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 05:59:23.156682 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 05:59:23.156708 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:54.104926 2026] [ssl:warn] [pid 54722:tid 54722] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:54.104952 2026] [ssl:warn] [pid 54722:tid 54722] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:56.028385 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:56.028415 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:18.934015 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:18.934039 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:28.141546 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:28.141572 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:41.930789 2026] [ssl:warn] [pid 55407:tid 55407] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:41.930817 2026] [ssl:warn] [pid 55407:tid 55407] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:43.825976 2026] [ssl:warn] [pid 55411:tid 55411] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:43.826017 2026] [ssl:warn] [pid 55411:tid 55411] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:32.242617 2026] [ssl:warn] [pid 26733:tid 26733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:32.242644 2026] [ssl:warn] [pid 26733:tid 26733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:34.140030 2026] [ssl:warn] [pid 26736:tid 26736] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:34.140056 2026] [ssl:warn] [pid 26736:tid 26736] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:55.991701 2026] [ssl:warn] [pid 56998:tid 56998] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:55.991727 2026] [ssl:warn] [pid 56998:tid 56998] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:57.917231 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:57.917231 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:24:47.590013 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:24:47.590042 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:18.827481 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:18.827506 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:40.419172 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:40.419199 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:26:02.469899 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:26:02.469899 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:18:00.986415 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:18:00.986452 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:15.505040 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:15.505065 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:38.868377 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:38.868404 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:24.176443 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:24.176443 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:40.584962 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:40.585005 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:51.398619 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:51.398646 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:04.602937 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:04.602965 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:13.347916 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:13.347952 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:35:49.807418 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:35:49.807448 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:40.537710 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:40.537724 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:49.535476 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:49.535515 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:52.724176 2026] [ssl:warn] [pid 36255:tid 36255] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:52.724201 2026] [ssl:warn] [pid 36255:tid 36255] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:54.646340 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:54.646366 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:16.870304 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:16.870332 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:25.989931 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:25.989959 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:33.084615 2026] [ssl:warn] [pid 36940:tid 36940] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:33.084664 2026] [ssl:warn] [pid 36940:tid 36940] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:35.109995 2026] [ssl:warn] [pid 36957:tid 36957] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:35.110054 2026] [ssl:warn] [pid 36957:tid 36957] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:41.798375 2026] [ssl:warn] [pid 8527:tid 8527] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:41.798403 2026] [ssl:warn] [pid 8527:tid 8527] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:43.732107 2026] [ssl:warn] [pid 8533:tid 8533] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:43.732132 2026] [ssl:warn] [pid 8533:tid 8533] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:32.147031 2026] [ssl:warn] [pid 39013:tid 39013] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:32.147056 2026] [ssl:warn] [pid 39013:tid 39013] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:34.013562 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:34.013588 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 10:11:45.206055 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 10:11:45.206083 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:43.820544 2026] [ssl:warn] [pid 46843:tid 46843] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:43.820572 2026] [ssl:warn] [pid 46843:tid 46843] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:45.657563 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:45.657589 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:03.817089 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:03.817129 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:12.463103 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:12.463128 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:17.373403 2026] [ssl:warn] [pid 47514:tid 47514] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:17.373429 2026] [ssl:warn] [pid 47514:tid 47514] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:19.257311 2026] [ssl:warn] [pid 47519:tid 47519] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:19.257353 2026] [ssl:warn] [pid 47519:tid 47519] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:29:00.231445 2026] [ssl:warn] [pid 18766:tid 18766] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:29:00.231472 2026] [ssl:warn] [pid 18766:tid 18766] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:29:02.142108 2026] [ssl:warn] [pid 18769:tid 18769] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:29:02.142133 2026] [ssl:warn] [pid 18769:tid 18769] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:47.429391 2026] [ssl:warn] [pid 48704:tid 48704] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:47.429418 2026] [ssl:warn] [pid 48704:tid 48704] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:49.371552 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:49.371578 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:19:29.979429 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:19:29.979456 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:20:19.164966 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:20:19.164994 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:29:26.698367 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:29:26.698396 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:30:07.456736 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:30:07.456775 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:52.453166 2026] [ssl:warn] [pid 25963:tid 25963] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:52.453194 2026] [ssl:warn] [pid 25963:tid 25963] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:54.399823 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:54.399848 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:09.660153 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:09.660212 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:18.641871 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:18.641907 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:26.355473 2026] [ssl:warn] [pid 26549:tid 26549] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:26.355503 2026] [ssl:warn] [pid 26549:tid 26549] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:28.250395 2026] [ssl:warn] [pid 26552:tid 26552] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:28.250423 2026] [ssl:warn] [pid 26552:tid 26552] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:53.155483 2026] [ssl:warn] [pid 64508:tid 64508] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:53.155509 2026] [ssl:warn] [pid 64508:tid 64508] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:55.079648 2026] [ssl:warn] [pid 64526:tid 64526] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:55.079673 2026] [ssl:warn] [pid 64526:tid 64526] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:48.958047 2026] [ssl:warn] [pid 29552:tid 29552] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:48.958075 2026] [ssl:warn] [pid 29552:tid 29552] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:50.862808 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:50.862834 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:35.526906 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:35.526932 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:43.823781 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:43.823808 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:53.856520 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:53.856547 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:31:58.748973 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:31:58.749023 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 14:14:11.636115 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 14:14:11.636160 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:38.182290 2026] [ssl:warn] [pid 48740:tid 48740] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:38.182318 2026] [ssl:warn] [pid 48740:tid 48740] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:40.061952 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:40.061978 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:54.138022 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:54.138049 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:03.924833 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:03.924859 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:10.627900 2026] [ssl:warn] [pid 49348:tid 49348] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:10.627925 2026] [ssl:warn] [pid 49348:tid 49348] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:12.553505 2026] [ssl:warn] [pid 49350:tid 49350] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:12.553531 2026] [ssl:warn] [pid 49350:tid 49350] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:29:59.342040 2026] [ssl:warn] [pid 20828:tid 20828] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:29:59.342055 2026] [ssl:warn] [pid 20828:tid 20828] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:30:01.237735 2026] [ssl:warn] [pid 20830:tid 20830] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:30:01.237762 2026] [ssl:warn] [pid 20830:tid 20830] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:36:58.290743 2026] [ssl:warn] [pid 50948:tid 50948] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:36:58.290771 2026] [ssl:warn] [pid 50948:tid 50948] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:37:00.621699 2026] [ssl:warn] [pid 50952:tid 50952] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:37:00.621726 2026] [ssl:warn] [pid 50952:tid 50952] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:40.372357 2026] [ssl:warn] [pid 6602:tid 6602] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:40.372431 2026] [ssl:warn] [pid 6602:tid 6602] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:42.305261 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:42.305293 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:00.738182 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:00.738209 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:09.958336 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:09.958373 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:23.696121 2026] [ssl:warn] [pid 7314:tid 7314] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:23.696138 2026] [ssl:warn] [pid 7314:tid 7314] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:25.582197 2026] [ssl:warn] [pid 7321:tid 7321] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:25.582223 2026] [ssl:warn] [pid 7321:tid 7321] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:48.805532 2026] [ssl:warn] [pid 44184:tid 44184] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:48.805558 2026] [ssl:warn] [pid 44184:tid 44184] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:50.740775 2026] [ssl:warn] [pid 44186:tid 44186] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:50.740813 2026] [ssl:warn] [pid 44186:tid 44186] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:49.152162 2026] [ssl:warn] [pid 9346:tid 9346] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:49.152189 2026] [ssl:warn] [pid 9346:tid 9346] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:51.068112 2026] [ssl:warn] [pid 9349:tid 9349] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:51.068156 2026] [ssl:warn] [pid 9349:tid 9349] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:39.978307 2026] [ssl:warn] [pid 36125:tid 36125] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:39.978336 2026] [ssl:warn] [pid 36125:tid 36125] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:41.886976 2026] [ssl:warn] [pid 36127:tid 36127] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:41.887001 2026] [ssl:warn] [pid 36127:tid 36127] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:44.098840 2026] [ssl:warn] [pid 9099:tid 9099] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:44.098880 2026] [ssl:warn] [pid 9099:tid 9099] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:46.008300 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:46.008318 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:35.347176 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:35.347207 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:38.944707 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:38.944732 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:49.494133 2026] [ssl:warn] [pid 52728:tid 52728] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:49.494161 2026] [ssl:warn] [pid 52728:tid 52728] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:51.391745 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:51.391770 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:04.402208 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:04.402263 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:15.278964 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:15.278988 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:21.777302 2026] [ssl:warn] [pid 54248:tid 54248] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:21.777326 2026] [ssl:warn] [pid 54248:tid 54248] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:23.656169 2026] [ssl:warn] [pid 54251:tid 54251] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:23.656195 2026] [ssl:warn] [pid 54251:tid 54251] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:39.941401 2026] [ssl:warn] [pid 31242:tid 31242] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:39.941428 2026] [ssl:warn] [pid 31242:tid 31242] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:41.883756 2026] [ssl:warn] [pid 31270:tid 31270] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:41.883782 2026] [ssl:warn] [pid 31270:tid 31270] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:35.461095 2026] [ssl:warn] [pid 62745:tid 62745] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:35.461152 2026] [ssl:warn] [pid 62745:tid 62745] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:37.413409 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:37.413436 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 07:27:55.211940 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 07:27:55.211965 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:01:51.300857 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:01:51.300909 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:02:01.491502 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:02:01.491528 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:06:19.684863 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:06:19.684892 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:09:20.246782 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:09:20.246834 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:26:32.736527 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:26:32.736554 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:49:13.788909 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:49:13.788936 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 18:06:02.931723 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 18:06:02.931754 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:51.291550 2026] [ssl:warn] [pid 61206:tid 61206] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:51.291580 2026] [ssl:warn] [pid 61206:tid 61206] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:53.219086 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:53.219115 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:08.742208 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:08.742233 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:17.411245 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:17.411293 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:31.178886 2026] [ssl:warn] [pid 61774:tid 61774] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:31.178911 2026] [ssl:warn] [pid 61774:tid 61774] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:33.041958 2026] [ssl:warn] [pid 61780:tid 61780] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:33.041983 2026] [ssl:warn] [pid 61780:tid 61780] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:05.665879 2026] [ssl:warn] [pid 34333:tid 34333] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:05.665905 2026] [ssl:warn] [pid 34333:tid 34333] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:07.536150 2026] [ssl:warn] [pid 34335:tid 34335] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:07.536175 2026] [ssl:warn] [pid 34335:tid 34335] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:50.455095 2026] [ssl:warn] [pid 65201:tid 65201] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:50.455122 2026] [ssl:warn] [pid 65201:tid 65201] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:52.349492 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:52.349517 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:08:05.965820 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:08:05.965849 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:10:36.459205 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:10:36.459232 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:43.027003 2026] [ssl:warn] [pid 36232:tid 36232] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:43.027033 2026] [ssl:warn] [pid 36232:tid 36232] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:44.855198 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:44.855233 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:59.246164 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:59.246191 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:08.167193 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:08.167263 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:14.878524 2026] [ssl:warn] [pid 36816:tid 36816] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:14.878550 2026] [ssl:warn] [pid 36816:tid 36816] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:16.667491 2026] [ssl:warn] [pid 36820:tid 36820] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:16.667517 2026] [ssl:warn] [pid 36820:tid 36820] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:39.921829 2026] [ssl:warn] [pid 9322:tid 9322] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:39.921861 2026] [ssl:warn] [pid 9322:tid 9322] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:41.732202 2026] [ssl:warn] [pid 9328:tid 9328] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:41.732229 2026] [ssl:warn] [pid 9328:tid 9328] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:03.774209 2026] [ssl:warn] [pid 39898:tid 39898] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:03.774265 2026] [ssl:warn] [pid 39898:tid 39898] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:05.623902 2026] [ssl:warn] [pid 39904:tid 39904] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:05.623927 2026] [ssl:warn] [pid 39904:tid 39904] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:43.043147 2026] [ssl:warn] [pid 19773:tid 19773] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:43.043188 2026] [ssl:warn] [pid 19773:tid 19773] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:44.962761 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:44.962788 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:56.975956 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:56.975981 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:06.207551 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:06.207583 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:13.946993 2026] [ssl:warn] [pid 20341:tid 20341] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:13.947019 2026] [ssl:warn] [pid 20341:tid 20341] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:15.831845 2026] [ssl:warn] [pid 20343:tid 20343] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:15.831874 2026] [ssl:warn] [pid 20343:tid 20343] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:04.731495 2026] [ssl:warn] [pid 57956:tid 57956] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:04.731532 2026] [ssl:warn] [pid 57956:tid 57956] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:06.611419 2026] [ssl:warn] [pid 57959:tid 57959] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:06.611443 2026] [ssl:warn] [pid 57959:tid 57959] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:57.345657 2026] [ssl:warn] [pid 23733:tid 23733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:57.345684 2026] [ssl:warn] [pid 23733:tid 23733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:59.230402 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:59.230432 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:05.453988 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:05.454020 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:18.383096 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:18.383122 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:38.157279 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:38.157307 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:49:53.594031 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:49:53.594071 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:51.053362 2026] [ssl:warn] [pid 7356:tid 7356] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:51.053403 2026] [ssl:warn] [pid 7356:tid 7356] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:52.915049 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:52.915081 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:08.901154 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:08.901195 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:18.421506 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:18.421532 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:32.183944 2026] [ssl:warn] [pid 7942:tid 7942] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:32.183973 2026] [ssl:warn] [pid 7942:tid 7942] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:34.036847 2026] [ssl:warn] [pid 7947:tid 7947] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:34.036872 2026] [ssl:warn] [pid 7947:tid 7947] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:43.504951 2026] [ssl:warn] [pid 45735:tid 45735] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:43.504978 2026] [ssl:warn] [pid 45735:tid 45735] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:45.326674 2026] [ssl:warn] [pid 45740:tid 45740] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:45.326700 2026] [ssl:warn] [pid 45740:tid 45740] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:53.746719 2026] [ssl:warn] [pid 11534:tid 11534] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:53.746745 2026] [ssl:warn] [pid 11534:tid 11534] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:55.584220 2026] [ssl:warn] [pid 11536:tid 11536] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:55.584274 2026] [ssl:warn] [pid 11536:tid 11536] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:52.429319 2026] [ssl:warn] [pid 62684:tid 62684] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:52.429349 2026] [ssl:warn] [pid 62684:tid 62684] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:54.260180 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:54.260207 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:09.603139 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:09.603164 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:18.652943 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:18.652968 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:29.421091 2026] [ssl:warn] [pid 63259:tid 63259] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:29.421116 2026] [ssl:warn] [pid 63259:tid 63259] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:31.287450 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:31.287491 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:39:44.233163 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:39:44.233199 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:42.545175 2026] [ssl:warn] [pid 35750:tid 35750] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:42.545211 2026] [ssl:warn] [pid 35750:tid 35750] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:44.377358 2026] [ssl:warn] [pid 35753:tid 35753] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:44.377384 2026] [ssl:warn] [pid 35753:tid 35753] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:27.477364 2026] [ssl:warn] [pid 1135:tid 1135] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:27.477389 2026] [ssl:warn] [pid 1135:tid 1135] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:29.336056 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:29.336083 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:01.701536 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:01.701567 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:05.290137 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:05.290164 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:46.735272 2026] [ssl:warn] [pid 20134:tid 20134] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:46.735310 2026] [ssl:warn] [pid 20134:tid 20134] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:48.565047 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:48.565079 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:04.384434 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:04.384461 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:13.003044 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:13.003071 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:18.722878 2026] [ssl:warn] [pid 20707:tid 20707] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:18.722902 2026] [ssl:warn] [pid 20707:tid 20707] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:20.577071 2026] [ssl:warn] [pid 20712:tid 20712] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:20.577098 2026] [ssl:warn] [pid 20712:tid 20712] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:10.901863 2026] [ssl:warn] [pid 58568:tid 58568] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:10.901890 2026] [ssl:warn] [pid 58568:tid 58568] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:12.723541 2026] [ssl:warn] [pid 58570:tid 58570] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:12.723566 2026] [ssl:warn] [pid 58570:tid 58570] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:03.719935 2026] [ssl:warn] [pid 24538:tid 24538] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:03.719961 2026] [ssl:warn] [pid 24538:tid 24538] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:05.566454 2026] [ssl:warn] [pid 24822:tid 24822] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:05.566494 2026] [ssl:warn] [pid 24822:tid 24822] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:42.021563 2026] [ssl:warn] [pid 50040:tid 50040] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:42.021593 2026] [ssl:warn] [pid 50040:tid 50040] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:43.809120 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:43.809145 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:58.399532 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:58.399557 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:09.221016 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:09.221041 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:14.985881 2026] [ssl:warn] [pid 50916:tid 50916] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:14.985907 2026] [ssl:warn] [pid 50916:tid 50916] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:16.782136 2026] [ssl:warn] [pid 50918:tid 50918] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:16.782187 2026] [ssl:warn] [pid 50918:tid 50918] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:29.206606 2026] [ssl:warn] [pid 28339:tid 28339] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:29.206632 2026] [ssl:warn] [pid 28339:tid 28339] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:30.960702 2026] [ssl:warn] [pid 28342:tid 28342] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:30.960729 2026] [ssl:warn] [pid 28342:tid 28342] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:49.725686 2026] [ssl:warn] [pid 59002:tid 59002] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:49.725713 2026] [ssl:warn] [pid 59002:tid 59002] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:51.573898 2026] [ssl:warn] [pid 59010:tid 59010] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:51.573924 2026] [ssl:warn] [pid 59010:tid 59010] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:43.116530 2026] [ssl:warn] [pid 16759:tid 16759] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:43.116560 2026] [ssl:warn] [pid 16759:tid 16759] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:44.902613 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:44.902630 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:57.957906 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:57.957932 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:06.665843 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:06.665884 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:14.309591 2026] [ssl:warn] [pid 17332:tid 17332] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:14.309617 2026] [ssl:warn] [pid 17332:tid 17332] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:16.085936 2026] [ssl:warn] [pid 17334:tid 17334] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:16.085973 2026] [ssl:warn] [pid 17334:tid 17334] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:10.580919 2026] [ssl:warn] [pid 55108:tid 55108] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:10.580947 2026] [ssl:warn] [pid 55108:tid 55108] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:12.402169 2026] [ssl:warn] [pid 55110:tid 55110] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:12.402195 2026] [ssl:warn] [pid 55110:tid 55110] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:56.283625 2026] [ssl:warn] [pid 20730:tid 20730] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:56.283659 2026] [ssl:warn] [pid 20730:tid 20730] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:58.068819 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:58.068858 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:36:39.662026 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:36:39.662060 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:37:19.757425 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:37:19.757443 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:40:27.358333 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:40:27.358361 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:04.686319 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:04.686346 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:33.024482 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:33.024509 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:42:02.703784 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:42:02.703828 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:10.742588 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:10.742615 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:47.837180 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:47.837206 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:44:33.676180 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:44:33.676215 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:46:20.014911 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:46:20.014938 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:42.464948 2026] [ssl:warn] [pid 33962:tid 33962] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:42.464975 2026] [ssl:warn] [pid 33962:tid 33962] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:44.253384 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:44.253412 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:59.877775 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:59.877800 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:10.126298 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:10.126298 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:20.891825 2026] [ssl:warn] [pid 34537:tid 34537] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:20.891851 2026] [ssl:warn] [pid 34537:tid 34537] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:22.730074 2026] [ssl:warn] [pid 34546:tid 34546] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:22.730100 2026] [ssl:warn] [pid 34546:tid 34546] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:28.637861 2026] [ssl:warn] [pid 7132:tid 7132] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:28.637889 2026] [ssl:warn] [pid 7132:tid 7132] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:30.469765 2026] [ssl:warn] [pid 7138:tid 7138] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:30.469791 2026] [ssl:warn] [pid 7138:tid 7138] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:28.573989 2026] [ssl:warn] [pid 38651:tid 38651] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:28.574014 2026] [ssl:warn] [pid 38651:tid 38651] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:30.351389 2026] [ssl:warn] [pid 38653:tid 38653] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:30.351414 2026] [ssl:warn] [pid 38653:tid 38653] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:57.237395 2026] [ssl:warn] [pid 53855:tid 53855] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:57.237395 2026] [ssl:warn] [pid 53855:tid 53855] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:59.031093 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:59.031120 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:28:50.381667 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:28:50.381695 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:04.514290 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:04.514329 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:18.286785 2026] [ssl:warn] [pid 54586:tid 54586] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:18.286811 2026] [ssl:warn] [pid 54586:tid 54586] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:20.109610 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:20.109637 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:22.943490 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:22.943528 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:55.748714 2026] [ssl:warn] [pid 27687:tid 27687] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:55.748741 2026] [ssl:warn] [pid 27687:tid 27687] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:57.554430 2026] [ssl:warn] [pid 27691:tid 27691] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:57.554472 2026] [ssl:warn] [pid 27691:tid 27691] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:45.209970 2026] [ssl:warn] [pid 59180:tid 59180] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:45.209970 2026] [ssl:warn] [pid 59180:tid 59180] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:47.048078 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:47.048108 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 07:54:38.694301 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 07:54:38.694327 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:09.469466 2026] [ssl:warn] [pid 44370:tid 44370] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:09.469498 2026] [ssl:warn] [pid 44370:tid 44370] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:11.254542 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:11.254568 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:44:52.553497 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:44:52.553522 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:03.500841 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:03.500867 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:10.277231 2026] [ssl:warn] [pid 46101:tid 46101] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:10.277286 2026] [ssl:warn] [pid 46101:tid 46101] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:12.051535 2026] [ssl:warn] [pid 46103:tid 46103] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:12.051561 2026] [ssl:warn] [pid 46103:tid 46103] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:54.372151 2026] [ssl:warn] [pid 19080:tid 19080] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:54.372176 2026] [ssl:warn] [pid 19080:tid 19080] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:56.459218 2026] [ssl:warn] [pid 19104:tid 19104] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:56.459275 2026] [ssl:warn] [pid 19104:tid 19104] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:29.245303 2026] [ssl:warn] [pid 49834:tid 49834] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:29.245303 2026] [ssl:warn] [pid 49834:tid 49834] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:30.996286 2026] [ssl:warn] [pid 49837:tid 49837] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:30.996313 2026] [ssl:warn] [pid 49837:tid 49837] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:56.831541 2026] [ssl:warn] [pid 10225:tid 10225] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:56.831594 2026] [ssl:warn] [pid 10225:tid 10225] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:58.651803 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:58.651827 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:13.079970 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:13.080035 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:26.460790 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:26.460815 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:32.398615 2026] [ssl:warn] [pid 11104:tid 11104] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:32.398673 2026] [ssl:warn] [pid 11104:tid 11104] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:34.184197 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:34.184222 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:50:37.601935 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:50:37.601961 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:01.801203 2026] [ssl:warn] [pid 49374:tid 49374] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:01.801259 2026] [ssl:warn] [pid 49374:tid 49374] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:03.575845 2026] [ssl:warn] [pid 49376:tid 49376] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:03.575869 2026] [ssl:warn] [pid 49376:tid 49376] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:49.801809 2026] [ssl:warn] [pid 15542:tid 15542] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:49.801847 2026] [ssl:warn] [pid 15542:tid 15542] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:51.562091 2026] [ssl:warn] [pid 15544:tid 15544] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:51.562118 2026] [ssl:warn] [pid 15544:tid 15544] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:52.589388 2026] [ssl:warn] [pid 25505:tid 25505] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:52.589416 2026] [ssl:warn] [pid 25505:tid 25505] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:54.629750 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:54.629794 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:02.678792 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:02.678818 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:15.191560 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:15.191586 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:21.554735 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:21.554760 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:23.303101 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:23.303124 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:38:43.293360 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:38:43.293386 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:39:39.107702 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:39:39.107730 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:32.404675 2026] [ssl:warn] [pid 65386:tid 65386] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:32.404700 2026] [ssl:warn] [pid 65386:tid 65386] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:34.121833 2026] [ssl:warn] [pid 65429:tid 65429] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:34.121859 2026] [ssl:warn] [pid 65429:tid 65429] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:50.144744 2026] [ssl:warn] [pid 30894:tid 30894] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:50.144772 2026] [ssl:warn] [pid 30894:tid 30894] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:51.901478 2026] [ssl:warn] [pid 30899:tid 30899] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:51.901507 2026] [ssl:warn] [pid 30899:tid 30899] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:57.046736 2026] [ssl:warn] [pid 40681:tid 40681] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:57.046769 2026] [ssl:warn] [pid 40681:tid 40681] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:58.832911 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:58.832936 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:16.507926 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:16.507951 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:38.959193 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:38.959217 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:52.786601 2026] [ssl:warn] [pid 41969:tid 41969] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:52.786627 2026] [ssl:warn] [pid 41969:tid 41969] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:54.519722 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:54.519748 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:35:08.445738 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:35:08.445765 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:36:30.046681 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:36:30.046708 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:12.782738 2026] [ssl:warn] [pid 20279:tid 20279] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:12.782762 2026] [ssl:warn] [pid 20279:tid 20279] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:14.535367 2026] [ssl:warn] [pid 20283:tid 20283] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:14.535404 2026] [ssl:warn] [pid 20283:tid 20283] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:29.030002 2026] [ssl:warn] [pid 50821:tid 50821] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:29.030027 2026] [ssl:warn] [pid 50821:tid 50821] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:30.805159 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:30.805185 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:43.407105 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:43.407153 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:44.961198 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:44.961224 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:49.678218 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:49.678285 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:51.229332 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:51.229359 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:53.664194 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:53.664218 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:41.618296 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:41.618336 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:43.283532 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:43.283558 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:45.576848 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:45.576875 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:47.982275 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:47.982302 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:51.617444 2026] [ssl:warn] [pid 2860:tid 2860] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:51.617470 2026] [ssl:warn] [pid 2860:tid 2860] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:53.376896 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:53.376923 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:29.545076 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:29.545104 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:44.761908 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:44.761933 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:57.787776 2026] [ssl:warn] [pid 3900:tid 3900] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:57.787805 2026] [ssl:warn] [pid 3900:tid 3900] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:59.620266 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:59.620303 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:13:46.413202 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:13:46.413228 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:06.868218 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:06.868306 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:31.559953 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:31.559979 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:54.844737 2026] [ssl:warn] [pid 43697:tid 43697] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:54.844765 2026] [ssl:warn] [pid 43697:tid 43697] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:56.594898 2026] [ssl:warn] [pid 43703:tid 43703] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:56.594935 2026] [ssl:warn] [pid 43703:tid 43703] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:03.548727 2026] [ssl:warn] [pid 9257:tid 9257] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:03.548769 2026] [ssl:warn] [pid 9257:tid 9257] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:05.265307 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:05.265333 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:15.367106 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:15.367134 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:21.446571 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:21.446598 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:52.916509 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:52.916537 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:58.308716 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:58.308744 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:49.634605 2026] [ssl:warn] [pid 13712:tid 13712] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:49.634633 2026] [ssl:warn] [pid 13712:tid 13712] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:51.439113 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:51.439138 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:12.847812 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:12.847839 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:31.769560 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:31.769586 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:43.921404 2026] [ssl:warn] [pid 15299:tid 15299] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:43.921429 2026] [ssl:warn] [pid 15299:tid 15299] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:45.669111 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:45.669136 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:13:50.524820 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:13:50.524861 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:49.153359 2026] [ssl:warn] [pid 54349:tid 54349] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:49.153384 2026] [ssl:warn] [pid 54349:tid 54349] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:50.882658 2026] [ssl:warn] [pid 54367:tid 54367] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:50.882683 2026] [ssl:warn] [pid 54367:tid 54367] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:08.992807 2026] [ssl:warn] [pid 19990:tid 19990] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:08.992835 2026] [ssl:warn] [pid 19990:tid 19990] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:10.744676 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:10.744706 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:26:01.581471 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:26:01.581501 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:07.284905 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:07.284934 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:41.719228 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: aircraft-spruce.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:41.719291 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: aircraft-spruce.com.au:443:0 server certificate does NOT include an ID which matches the server name